233.331925] input: syz1 as /devices/virtual/input/input736 [ 233.369705] input: syz1 as /devices/virtual/input/input743 22:41:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x3, 0x8001}) [ 233.488454] input: syz1 as /devices/virtual/input/input744 22:41:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:41:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 233.616494] input: syz1 as /devices/virtual/input/input748 22:41:02 executing program 4: perf_event_open(&(0x7f0000000100)={0xe, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40200, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x1}) 22:41:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 233.727737] input: syz1 as /devices/virtual/input/input750 22:41:02 executing program 5 (fault-call:2 fault-nth:2): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 233.881781] input: syz1 as /devices/virtual/input/input752 22:41:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:03 executing program 5 (fault-call:2 fault-nth:3): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 234.789434] input: syz1 as /devices/virtual/input/input760 [ 234.852558] FAULT_INJECTION: forcing a failure. [ 234.852558] name failslab, interval 1, probability 0, space 0, times 0 [ 234.914444] CPU: 1 PID: 13775 Comm: syz-executor.0 Not tainted 4.14.142 #0 [ 234.921505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.921512] Call Trace: [ 234.921531] dump_stack+0x138/0x197 [ 234.921551] should_fail.cold+0x10f/0x159 [ 234.921568] should_failslab+0xdb/0x130 [ 234.921582] __kmalloc_track_caller+0x2ec/0x790 [ 234.921593] ? pointer+0xb10/0xb10 [ 234.921605] ? kasprintf+0xa2/0xbe [ 234.921619] kvasprintf+0xa7/0x110 [ 234.921629] ? bust_spinlocks+0xc0/0xc0 [ 234.921642] ? check_preemption_disabled+0x3c/0x250 [ 234.921657] kasprintf+0xa2/0xbe [ 234.921667] ? kvasprintf_const+0x170/0x170 [ 234.921681] ? perf_trace_lock+0x109/0x500 [ 234.921693] ? save_trace+0x290/0x290 [ 234.921708] ? input_default_getkeycode+0x4d0/0x4d0 [ 234.921717] input_devnode+0x4c/0x90 [ 234.921729] device_get_devnode+0x170/0x2e0 [ 234.921744] devtmpfs_delete_node+0x9b/0x170 [ 234.921754] ? devtmpfs_create_node+0x220/0x220 [ 234.921764] ? refcount_sub_and_test+0x8d/0xf0 [ 234.921777] ? refcount_dec_and_test+0x1b/0x20 [ 234.921788] ? kobject_put+0x6d/0x80 [ 234.921801] ? klist_children_put+0x44/0x50 [ 234.921811] ? klist_put+0xc6/0x160 [ 234.921826] device_del+0x799/0xaa0 [ 234.921840] ? __device_links_no_driver+0x220/0x220 [ 234.921851] ? mark_held_locks+0xb1/0x100 [ 234.921865] cdev_device_del+0x1a/0x70 [ 234.921877] evdev_disconnect+0x42/0xb0 [ 234.921889] __input_unregister_device+0x1eb/0x480 [ 234.921904] input_unregister_device+0xa9/0xf0 22:41:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 234.921915] uinput_destroy_device+0x1ce/0x220 [ 234.921932] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 234.921947] ? uinput_request_submit.part.0+0x290/0x290 [ 234.921956] ? perf_trace_lock+0x109/0x500 [ 234.921967] ? check_preemption_disabled+0x3c/0x250 [ 234.921982] ? perf_trace_lock+0x109/0x500 [ 234.921999] ? __might_sleep+0x93/0xb0 [ 234.922008] ? __fget+0x210/0x370 [ 234.922023] ? uinput_compat_ioctl+0xa0/0xa0 [ 234.922032] uinput_ioctl+0x4a/0x60 [ 234.922044] do_vfs_ioctl+0x7ae/0x1060 [ 234.922056] ? selinux_file_mprotect+0x5d0/0x5d0 22:41:03 executing program 5 (fault-call:2 fault-nth:4): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 234.922065] ? lock_downgrade+0x6e0/0x6e0 [ 234.922084] ? ioctl_preallocate+0x1c0/0x1c0 [ 234.922096] ? __fget+0x237/0x370 [ 234.938665] ? security_file_ioctl+0x89/0xb0 [ 234.938682] SyS_ioctl+0x8f/0xc0 [ 234.938696] ? do_vfs_ioctl+0x1060/0x1060 [ 234.971112] do_syscall_64+0x1e8/0x640 [ 234.978771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.978805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 234.978815] RIP: 0033:0x4598e9 [ 235.009137] RSP: 002b:00007fc781c4ac78 EFLAGS: 00000246 [ 235.065547] ORIG_RAX: 0000000000000010 [ 235.065555] RAX: ffffffffffffffda RBX: 00007fc781c4ac90 RCX: 00000000004598e9 [ 235.065561] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 235.065568] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 235.065573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc781c4b6d4 [ 235.065579] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000005 [ 235.138114] FAULT_INJECTION: forcing a failure. [ 235.138114] name failslab, interval 1, probability 0, space 0, times 0 [ 235.244563] CPU: 1 PID: 13788 Comm: syz-executor.5 Not tainted 4.14.142 #0 [ 235.251632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.251639] Call Trace: [ 235.251657] dump_stack+0x138/0x197 [ 235.251674] should_fail.cold+0x10f/0x159 [ 235.251688] should_failslab+0xdb/0x130 [ 235.251700] __kmalloc+0x2f0/0x7a0 [ 235.251708] ? chrdev_open+0xb5/0x590 [ 235.251721] ? evdev_open+0xf5/0x4ec [ 235.279170] evdev_open+0xf5/0x4ec [ 235.279184] ? refcount_inc+0x1f/0x40 [ 235.279199] ? evdev_ioctl+0x30/0x30 [ 235.290272] chrdev_open+0x207/0x590 [ 235.290286] ? cdev_put.part.0+0x50/0x50 [ 235.290298] ? security_file_open+0x89/0x190 [ 235.290313] do_dentry_open+0x73b/0xeb0 [ 235.314018] ? cdev_put.part.0+0x50/0x50 [ 235.318113] vfs_open+0x105/0x220 [ 235.321584] path_openat+0x8bd/0x3f70 [ 235.325412] ? debug_smp_processor_id+0x1c/0x20 [ 235.330106] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 235.334786] ? find_held_lock+0x35/0x130 [ 235.338956] ? SOFTIRQ_verbose+0x10/0x10 [ 235.343036] ? __alloc_fd+0x1d4/0x4a0 [ 235.346858] do_filp_open+0x18e/0x250 [ 235.350683] ? may_open_dev+0xe0/0xe0 [ 235.354506] ? _raw_spin_unlock+0x2d/0x50 [ 235.358814] ? __alloc_fd+0x1d4/0x4a0 [ 235.362637] do_sys_open+0x2c5/0x430 [ 235.366363] ? filp_open+0x70/0x70 [ 235.369919] SyS_open+0x2d/0x40 [ 235.373205] ? do_sys_open+0x430/0x430 [ 235.377121] do_syscall_64+0x1e8/0x640 [ 235.381119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.385980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.391304] RIP: 0033:0x4137d1 22:41:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={r6, 0x4dba, 0x8, [0x7585, 0x0, 0x40, 0x8, 0x9, 0x1ff, 0x6, 0x3]}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r3}, &(0x7f0000000100)=0x8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:04 executing program 0 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 235.394497] RSP: 002b:00007f94b27357a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 235.402253] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1 [ 235.409533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f94b2735850 [ 235.416820] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 235.424200] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f94b27366d4 [ 235.431485] R13: 00000000004c8c84 R14: 00000000004dfc48 R15: 0000000000000004 [ 235.451917] device hsr_slave_1 left promiscuous mode 22:41:04 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(0x0, 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:04 executing program 5 (fault-call:2 fault-nth:5): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffd47, 0xd7, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x200) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000100)) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ec490900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r5, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x3ff, 0x18015, 0x808, 0x6, r6}, &(0x7f0000000400)=0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 235.852316] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 235.852321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc781c4b6d4 [ 235.852329] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000005 22:41:04 executing program 0 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.058800] input: syz1 as /devices/virtual/input/input773 22:41:04 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 236.099146] input: syz1 as /devices/virtual/input/input781 22:41:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 236.288429] __input_unregister_device+0x1eb/0x480 [ 236.288443] input_unregister_device+0xa9/0xf0 [ 236.302217] uinput_destroy_device+0x1ce/0x220 [ 236.302234] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 236.302247] ? uinput_request_submit.part.0+0x290/0x290 [ 236.302257] ? perf_trace_lock+0x109/0x500 [ 236.302271] ? check_preemption_disabled+0x3c/0x250 [ 236.302286] ? perf_trace_lock+0x109/0x500 [ 236.302302] ? __might_sleep+0x93/0xb0 [ 236.302311] ? __fget+0x210/0x370 [ 236.302323] ? uinput_compat_ioctl+0xa0/0xa0 [ 236.311392] uinput_ioctl+0x4a/0x60 [ 236.311408] do_vfs_ioctl+0x7ae/0x1060 [ 236.311421] ? selinux_file_mprotect+0x5d0/0x5d0 [ 236.311433] ? lock_downgrade+0x6e0/0x6e0 [ 236.311442] ? ioctl_preallocate+0x1c0/0x1c0 [ 236.311454] ? __fget+0x237/0x370 [ 236.311470] ? security_file_ioctl+0x89/0xb0 [ 236.311481] SyS_ioctl+0x8f/0xc0 [ 236.311490] ? do_vfs_ioctl+0x1060/0x1060 [ 236.311504] do_syscall_64+0x1e8/0x640 [ 236.311513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.311528] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 236.311536] RIP: 0033:0x4598e9 [ 236.311542] RSP: 002b:00007fc781c4ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.311552] RAX: ffffffffffffffda RBX: 00007fc781c4ac90 RCX: 00000000004598e9 [ 236.311558] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 236.311563] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 236.311568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc781c4b6d4 [ 236.311574] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000005 22:41:05 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 236.514092] input: syz1 as /devices/virtual/input/input788 22:41:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.573716] input: syz1 as /devices/virtual/input/input791 22:41:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:05 executing program 0 (fault-call:5 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.725612] bond0 (unregistering): Released all slaves 22:41:05 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 22:41:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 236.805420] input: syz1 as /devices/virtual/input/input798 22:41:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x82180) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4}, &(0x7f0000000240)=0x8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x6685, &(0x7f0000001400)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000300)="3267fac695b2663610dd6592cae2a2ebe0fc88c351dd87810faf690072c364c3d48a2d360e8770d3f0ef126af2a730d07831d43c3aebd9742c0207cf95c75512af93a8a9fb1d33bf9fe7c28367a05df4b38770ab01d920715aae7cba08d290bebc12f2794bcb9b1441a58d654f21337f82ab404bcdb70c1669b5a415ea68a3b1e190212cab95dc9b7ebc3ecd134c4cb3cf7cdec26033e10b6c645da2e45f75cbaea2bcbda24d20af8831d8e066f431cea2e1ce0574f569faa927c0f7516b5c306264ab37e2b4fa6ff83d1091e4d2e6e3bdfe738688617815a055b21834da712b44c91b9d0f0c4417e4b211f06cae9765352139b501be72982c443f9e7b0c9cf42d72121d6ecd2b353902abdd3f74743fc575fb825b2458f3f70db0a642ff93c8e9e3abeddc41ffc006d0dd5820b5144ceafb38e474a32b24793dee5c29b2915a974be7c9c80044c8fd1c06e9beb2a669e386072cb51cf10658c304e9cc3fb5ff6cb361e635529f8165513c6a87d72d9d1f9739e1c2904b6fb0e3726c1c01c0277c32dae2b250f4de8df76a9c0e2c824f432d9e9542c63f4a2eae23d5f7e5ee2b222fa748e5cd0215486e97ecbe8d36ebcfb9517f1e112f7c1f2abccf337543274fafe6b6490d4f5a40712b4d244de66a58b11fc18182b5b5971f0f763be475f6ca90a886b76c58729e8fd64e6e6440a4b5bc382c6bddf4de68e49dd50ad6ebd11727290191f4fe3f361d11222b98ba7020450669f02e223d80729704bac40b7e81a03ab4a3825399a970964ffdc58d2e8c82767ce61ad2796ebf5aecd26d317a57ba17919fb815e5a4d3122adeb74dba17baaed79efe514f975a88a14f2425d9d0dd4c9cde1c5201e4be55cfcb6e2b96fbf577b2c4bcd4af31ce51af2deb9b02284cce486832643c5fc24e64134dd13958506f15ce8bc420e194c7ff64633f31e2ecd69ab37585df31f0318a7655daa1b392dba821063f5dc3c528a0bf4e4cf2fec2339c4bb9267021ad8f0bf066f5c6d290fbb36d5524b90fe58616b6c8fec7fb7adeca565e1e3372d5ec22c288984472a85208b99877c5d6fc32baaee42fee467179db798b8d7c0f41c503ca3ca48db2e62c9df6faeea766f714628d88c81dd4cb7ce91dea9e1b7a90047cd6a0a8c87df527c2151c97f3ee5c89ca296ff1d2f7a82086892b32b62c80b0c79a69d3679c9170184f1150422ae4728e367aab7b2c2ad71da5c9338a514338c716c463ea4ecb5fa8c037104a0f946597ce5f37157aa7e253f3c37cda7f0f267264423785fe613143eb9456de794d1e7716a5a76984401a37151253c13de77d85b20acc23b8e9198cb6a57cdea235dafeca2c544655147911fbc187a4ae0030b078edec6b8a38a4f52c9629d6539419ab0db18e71f8ad72ad046234b1b17a819443381742f49a0f209095a84ce295abe408b1b3bb7419f038d6bcaec0336ee8f048e4cffea898f098eda808aca6cb11f8780d63f43d989c76ab46552f19924539b074f320cff48cfe6cd3a0353a89073f614b977258257bde2f6d8e3683c5abf72e6913a68e30d48b647d099a9bc955bb9e853beb8ec592020c4e51875f3b079d26f1ebcbc13393c84bc807b4fde947f28c2143e48b887f032a13d0babba5e3625d5c8dc398f123c86ec53deb99dafbf8e096bc8f4015f2d1fb007afbb28c78fd2e645fbf243217b8356662eb1cc589cdaad8e49c000586f8a809a6609cf704a56cf6c2503bcdc63ecdcf71b97300af5e9c13ef15b859800d2891d38999a2f82df8deeae6c268c24039c98316457879e6f8826afa2fcb34c3951674d93c131f2139e253664e4fc2123e151971865c0fa83e94d7cec1db343b521319295935d7025f6dd43584394c0acbcfff64159fa9fb01ae3cef9badbfe25c8a07120b27abcac7fa8f091bab2e3477a7336532b58059db5d585a17080b4e16f1f918db60cc1ff74313edd1bb6388fdfbf6b77e739e9526ee0ebf973e1cb1b3e9e3814401661e9335e9c0d9b24b9520c107bf17456f0dd24f2e856cb877adf3a07c696b4aa29562b4fd5820b12e42e24c43a4df241aaf77dae08be9fc4fbd8269f1b42e558d9f920dc2326860ad472fb954b5f5018fd305a30c3cf81e20ba014aa9f0c8997314a0d499ed76ea9c6ca17e6f4cd7b8190fd3a0486e26dca0d8538c8bc0fec3fe2cf0c4a622e44857eb6812f5170e1611ea4e8e28a97ac761bdd4c6bac871b60c87952b00620665d061d27bea6dbe73e1e4b3eddecde3f6e6506c0081b0df9734ec3419f13089aacd507804d6e9a7b60bb37b7bb504230ce404f0256766d41ba5c83dab5c00f208a0f8f61e9da0e4ed58442d5a3750866d310fcf522a0f4ac3ad4e09190fddb4233c8985531e1e0b4c40c86a2aa742e654917b03aef88a85c23d9d76e5f5bcb54043db2afd3a1733c105401a9d9f8b1eb3b43b9034d3a2e0e7c240a063a6a1be7dc49b85891dee9e76471ac1d5f24dbbe863d75b0073105ad964ec2f9367a42e1be78e803f3643cbc39254aa5d63da0369bb986d1c7a21d94fb54773325f6da13e95d63eb577a7868790a804d461a6286b4100f50f72920e13bc7ee010df647641052e8c457f2ec82114a99b8440b9bb8772f8f2a604830fb6a0dac39ed4a135a5371f1af016c629587d2d6f9e1320fcbe6e6366edde13fdc7d84595cee10354e51e221a0a97edc2e3c4e45d157a1ddc2744f20c1048f7d6bcefb8b20190bb89d377fddfceb73faff3bfaefd4508aa8b730698138d652946b71608c2fa34c3ee1489082236142b40051c19facf400dc5c08e5acc24151678ffe0fd832d8b7047823cb13687ec52167f7ce82faf233ddfdb2f7784680b62ef0494db4faa96cbff077e839962bf8b55cae6363b5d18d35da5c9db2ffca9a28d6e58f508a7b6848c31ac9de4b0c15a46f3fe2d2254be4869f1fb173f306aa6fc132722b5c707ca07d5b270b949c567939de6c222ec4dd78296fc0779363648c73c35b47e3472b6a358f3147762f3dc3b28c5747a0c0dfb7dd57d8baca5b0148927856df115c1f86953a9d6755c04ed2a0fb226d4be775ccbb5a3f2e9d5d208a4cf6a590f5e778183ad88166ef67d066ab7a0a2a591ce73b27024e4fd607f96d6e4dff3c8ee76925559c37f9dea770de0516b918377fe57cfd2197a2e899de847e5ce59c457d0331666b985786ac4fa03d0440d57bb7e12de79910b0460963616c3cd86023f8dd7611c65b4caa38717ae30cdfe05f7ed7d209182813291ed444d92675d1c311ace14a080f3d86a14dc6393ae7393a733d437406c3dd2b852a14108349f90c8f67dc62e8c80a15d1e081c442ee9f8a814c3b26aad0d712d5a2041f88a16568a917bf36a257c47af79010b5a90df12e10f751f5ef16130f284cc2bf07039a7d979ae3a12acbc40244c379c1acf8a4253bcea63aa549fe6e8ee1300e68e9337b323ee9ed0e3303769039b29b87805de4f173308f5a67bbc73798dbd0b9164417a320419ea903ed41427a8ef53114f92db0e7350c3bc2a6c7cfd74d5b8970160657a523deef53384c6775fcb0bca2b6e3f74ac5a5a59c596c1629ab6f288f60fe87608e5557671dabba04529d572cacc0be9184a68b5794130cdcdcec4398ff839badc91aa99a5b847bd2d4a6aab622c5d3fe08ea3fb4d18ee818cdc439132a11e187b5773f1a3c4be0b6820bef1634eb306d559f5a611e9acbf0e0db1207d938f7414cb31ee467030b9afea272fc6746e5dee21bc455579f051076f644f9887c8669ba7ccfcd611f14ccabf2a1d928e6522e29f352aebecaaca494bc43d85514a1dc3bf151b0ee9ab5082b1e7a9b080858ba6849ad85d666db1cbd75f6df63a5006ba8bfc0a1eddaf4fb4b683800b704e75afda96753ce38528b1d075c1036453d378c6fa9a32867069288487df6bbfd8c24507e0e1de0957ce1c2f3664da89e6c0f759e371c7bb14c8cd5257952e87dd5c29780a3974d15a51772909c93ab8439e3f710ee75263b93ead1e3956bd06f6918aafab24c82e552f041318c370b9fc905646482873b8dce8855d2051e8ed1f31f6f4e97ef5045af4212cee45f3a2db8a67f2beaa71b470c36e3fdaaf2575810c94a54eb321d85e75074152854bf88e3d728fa2b01dbf8dccb49a1ed8e240bb9d9ddb1409ce8e64938ed2f3c9ad5a84e3e8112cb6cb480bb3e78e79ad352d650ed02e6c228c3c43cc917a3bfdff3a11007e10aa171f0ddf6fbd26673f7fd849c626197d5e3a10617c7ba526bc27e5e9fdafc28653b66130bcc5cb9fff0456203d36221b99801a7484690f121a161fe2c66016eb1118480cf2f8d4a83b4329a119c8edff5e2e3a35a185d8e3bbd6a8b9e2751308480e89f90241cb3a585b15c7b6ee022e3853ce612d1366b63ab7228148ce78a4dea98ea6b5fb0fde4432af2da9ebb09f0dbf351a779f78e61760d16427164c6a5a59b1a4a01ef69eb811ff8cf4d5cfa737eca1823d92337869a85f305d9e3f3ff36b68958bbf71ecb4b2a8376fcc158aefc80b401aa9f82b5179015936f411cdb7cd8c9acdb44dc3571860615a3cdeb73da078081ac098aef741c4a17ad9011cb393bdf5f2b6b8a901716e9800213b55ff90105fe6df227500c6483fe46ef216536f2c5d2c3ba5c3b84b8d08cc9de5ed723f612b7907890825504f74e3fd4c3e29822c6bf63550b8c29a9baa884bfbef487786f9d8c958429e7693305ca5c5f71d3cde8ae9570858ef2b251d69bc0b88452b93b2aad3b68d3dbdafe9407de89d60bec43889b19a4521fa8fe4c650af5983e8005dc2e43174b8cd186f2502ce2267c9d3fde7c9f60d149e3e2d8da02085df2bb3031cc927c0d871559dcb65e3b6fa9ba5df2f5ccb8935709ff1bb0c49640822c198999fd8355c6daf398db5143efea8a5f4c577c949143f99324f2add90c3bb2881bbf9a292b7faf4ebc84cfb8828f2113c77599a47d46cc2d1361f27b53e8cf132fc33083df5f900ab0b8fc3eb72be1edd1481fefa584181e5dcc082fce4e2d4bfebfe2f6f7013cf70f1ddc99cb8ba4b14120880373e53b65d44116a6fcb65c5f9fc71704eb7fdab9c2899f5120e5556f6b7fe3097c277bf5a56752223322e9d5a058f7ec580d41522cd2c435e3ea65c4f777573b59194dded206398811e7b3348a198c4b55b40dd5545dc3bc072cbf5f256978c6db7e26f323812022c51a1fe7482c0adb2e4bd5820a2a1a969936824b644e704801bee390b8bcd931b0ac8fcd2f39512064058f1e7bf33b1280d97c87693a97e1c680c9b58243e5522fd33c31c933d5de0aae6a4c1499b9537e97460c89fb2985ba4b686e8c098f33274ca744eceaad204f0349d206f765f1a20a7217df26d20bdf09e316f77201ab3b37dff38860cad4f745a9ab8daee8d3ac9717ca27338c28788d1742aadcf94063c30c365d4aab6787803f53137462e1e02885ab7b0b51a72bf2696acbd63eef5a31fb53dd5d974315d0ab6a3c8498c75935e8bc996aa5237100ddde1bfb219b59e9fd2d557017e9806e108c1ea6ca1c2044ae6297ef251864ff6ea66a040cb8437f9c5cdbcaeda2be34b12cbd7fe0a2068302ce8cc8b199cde09dbc2ddae29ef95271acf89fb74423dcad87a89746bf4d9cf0086848dda3400d03db7386f8d35100ef48b5ac51d36ea817bc05bf361bcecd031aae68a4b717fe81331626a2175639c787c92c77271cdf954514ea34fedce19aaa4ab9a3408748f25582cb8da673ce13fbb1ccaa27d2a9fd7bf248b5f185c5971c5af4f56c28e0d8deae2b7", 0xf6, 0x0, &(0x7f0000001300)="f2f2389b16cb7a817cbd3d76a858bdf94d6d3abf6ff28ae43bd42b505ffb6daaf3bb57ebb9f30f6cc0d1a13b814f60b4c2fcc9bed4d3cd72dff093644b457058671e77c8c61ac34be07dcebf884fd26fe9b3e5ded838bcebbd3f4dd355db6c27c944e39bee400984fb9213ff9653dada8eef7ccced469ca2a3a56941f9213c4e068a31774a509971f42ca8ee200d6896f1769244fcb006d61bb7f8dd22f689700c17a21f48423675dd258294732f000005014b23e632d41859b3b4d35d20b25eea45b46b933d2f2fd808b6d20bd3b5dd8852bd6396478d600605e01fe1be5ab6cbec9d39bda075616677e58cdee0e7fe0557d3649ae6"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x9, @loopback}]}, &(0x7f0000000280)=0x10) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x3, 'syz1\x00'}) openat$uhid(0xffffffffffffff9c, &(0x7f0000001480)='/dev/uhid\x00', 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), 0x4) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dlm_plock\x00', 0x0, 0x0) [ 236.874649] FAULT_INJECTION: forcing a failure. [ 236.874649] name failslab, interval 1, probability 0, space 0, times 0 [ 236.913191] CPU: 1 PID: 13891 Comm: syz-executor.0 Not tainted 4.14.142 #0 [ 236.920271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.929647] Call Trace: [ 236.932355] dump_stack+0x138/0x197 [ 236.936009] should_fail.cold+0x10f/0x159 [ 236.940280] should_failslab+0xdb/0x130 [ 236.944360] __kmalloc+0x2f0/0x7a0 [ 236.947956] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 236.953552] ? kobject_uevent_env+0x378/0xc23 [ 236.958587] ? rcu_read_lock_sched_held+0x110/0x130 [ 236.964144] ? kobject_get_path+0xbb/0x1a0 [ 236.968479] kobject_get_path+0xbb/0x1a0 [ 236.968493] ? devm_device_remove_groups+0x50/0x50 [ 236.968507] kobject_uevent_env+0x39c/0xc23 [ 236.968516] ? wait_for_completion+0x420/0x420 [ 236.968537] kobject_uevent+0x20/0x26 [ 236.968547] device_del+0x65c/0xaa0 [ 236.968559] ? __device_links_no_driver+0x220/0x220 [ 236.968575] ? mark_held_locks+0xb1/0x100 [ 236.982164] cdev_device_del+0x1a/0x70 [ 236.982181] evdev_disconnect+0x42/0xb0 [ 236.982193] __input_unregister_device+0x1eb/0x480 [ 236.982208] input_unregister_device+0xa9/0xf0 [ 236.982220] uinput_destroy_device+0x1ce/0x220 [ 236.982237] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 236.982252] ? uinput_request_submit.part.0+0x290/0x290 [ 236.999622] ? perf_trace_lock+0x109/0x500 [ 236.999640] ? check_preemption_disabled+0x3c/0x250 [ 236.999657] ? perf_trace_lock+0x109/0x500 [ 236.999675] ? __might_sleep+0x93/0xb0 [ 236.999684] ? __fget+0x210/0x370 [ 236.999702] ? uinput_compat_ioctl+0xa0/0xa0 [ 236.999710] uinput_ioctl+0x4a/0x60 [ 236.999724] do_vfs_ioctl+0x7ae/0x1060 [ 237.017134] ? selinux_file_mprotect+0x5d0/0x5d0 [ 237.017149] ? lock_downgrade+0x6e0/0x6e0 [ 237.017163] ? ioctl_preallocate+0x1c0/0x1c0 [ 237.017177] ? __fget+0x237/0x370 [ 237.017196] ? security_file_ioctl+0x89/0xb0 [ 237.017209] SyS_ioctl+0x8f/0xc0 [ 237.017217] ? do_vfs_ioctl+0x1060/0x1060 [ 237.017231] do_syscall_64+0x1e8/0x640 [ 237.029952] input: syz1 as /devices/virtual/input/input801 [ 237.031754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.031774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:41:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 237.031783] RIP: 0033:0x4598e9 [ 237.031788] RSP: 002b:00007fc781c6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.031800] RAX: ffffffffffffffda RBX: 00007fc781c6bc90 RCX: 00000000004598e9 [ 237.031807] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 237.031820] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 237.031826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc781c6c6d4 [ 237.031832] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000005 22:41:05 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:05 executing program 0 (fault-call:5 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:41:06 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x2, 0x0, 0x27, 0x0, 0x4dfe}, 0x9, 0x0, 'id1\x00', 'timer0\x00', 0x0, 0xe0, 0x7, 0x80000000, 0x9}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 237.336013] input: syz1 as /devices/virtual/input/input805 22:41:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000480)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000040)=0x78) 22:41:06 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'yam0\x00'}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000800097e8b753e0986d5e00212b4ef18e455c454c0524ee8e247be898d408da1d60958d19e2254398a4f4b3e3a7c39c6550480ea516b44e13330712565c23fd2988f9dad5636f470b1d3330268c1e80f324fa30f9b9324bf8d1f0dba6f9369bfeadbc8012a5ce961e27c3382f7e850d3a71"], 0xa4002) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:06 executing program 0 (fault-call:5 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 237.975156] input: syz1 as /devices/virtual/input/input814 22:41:06 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x346173c7, 0x2) getsockname$netrom(r0, &(0x7f0000000080)={{0x3, @default}, [@netrom, @rose, @remote, @null, @netrom, @remote, @rose, @rose]}, &(0x7f0000000000)=0x48) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x0, 0x1, {0x0, 0x32}}, 0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x0) 22:41:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 22:41:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 238.113907] input: syz1 as /devices/virtual/input/input817 [ 238.143394] input: syz1 as /devices/virtual/input/input818 [ 238.168666] FAULT_INJECTION: forcing a failure. [ 238.168666] name failslab, interval 1, probability 0, space 0, times 0 [ 238.208402] CPU: 0 PID: 13970 Comm: syz-executor.0 Not tainted 4.14.142 #0 22:41:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "4a216e04d100b525fb85167eb494c1e0a679c379"}, 0x15, 0xe6a4031f85efc485) [ 238.215477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.215485] Call Trace: [ 238.215506] dump_stack+0x138/0x197 [ 238.215530] should_fail.cold+0x10f/0x159 [ 238.235647] should_failslab+0xdb/0x130 [ 238.239658] kmem_cache_alloc_node+0x287/0x780 [ 238.244283] __alloc_skb+0x9c/0x500 [ 238.248031] ? skb_scrub_packet+0x4b0/0x4b0 [ 238.252381] ? netlink_has_listeners+0x20a/0x330 [ 238.257250] kobject_uevent_env+0x781/0xc23 [ 238.257263] ? wait_for_completion+0x420/0x420 [ 238.257295] kobject_uevent+0x20/0x26 [ 238.257313] device_del+0x65c/0xaa0 [ 238.270032] ? __device_links_no_driver+0x220/0x220 [ 238.270051] ? mark_held_locks+0xb1/0x100 [ 238.270071] cdev_device_del+0x1a/0x70 [ 238.270086] evdev_disconnect+0x42/0xb0 [ 238.270101] __input_unregister_device+0x1eb/0x480 [ 238.270118] input_unregister_device+0xa9/0xf0 [ 238.270132] uinput_destroy_device+0x1ce/0x220 [ 238.305138] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 238.310538] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 238.315972] ? uinput_request_submit.part.0+0x290/0x290 [ 238.321365] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 238.326606] ? perf_trace_run_bpf_submit+0x113/0x170 [ 238.331936] ? __might_sleep+0x93/0xb0 [ 238.335830] ? __fget+0x210/0x370 [ 238.339297] ? uinput_compat_ioctl+0xa0/0xa0 [ 238.339310] uinput_ioctl+0x4a/0x60 [ 238.339329] do_vfs_ioctl+0x7ae/0x1060 [ 238.339345] ? selinux_file_mprotect+0x5d0/0x5d0 [ 238.339361] ? lock_downgrade+0x6e0/0x6e0 [ 238.360184] ? ioctl_preallocate+0x1c0/0x1c0 [ 238.364610] ? __fget+0x237/0x370 [ 238.368094] ? security_file_ioctl+0x89/0xb0 [ 238.372531] SyS_ioctl+0x8f/0xc0 [ 238.376004] ? do_vfs_ioctl+0x1060/0x1060 [ 238.380169] do_syscall_64+0x1e8/0x640 [ 238.384069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.388947] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.394242] RIP: 0033:0x4598e9 [ 238.397462] RSP: 002b:00007fc781c6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.405279] RAX: ffffffffffffffda RBX: 00007fc781c6bc90 RCX: 00000000004598e9 [ 238.405293] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 238.405301] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 238.405310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc781c6c6d4 [ 238.405318] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000005 22:41:07 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0xffffffffffffff0c) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000007c0)=0x7, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffffc, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10000, 0x442200) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000200)={0x8, 0x5}) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfff, 0x40000) r3 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x3, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f00000002c0)={0x0, 0xde8, 0x100000000, [], &(0x7f0000000280)=0x40}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000100)={0xb3bd8979271a0a52, 0x0, [], @raw_data=[0x7, 0x9, 0x1, 0x2, 0x7, 0x8, 0x8000, 0x7, 0x6, 0x3, 0x3, 0x100000000, 0x5, 0x3, 0x529, 0xfffffffffffffffc, 0xfd3d, 0x8, 0x5, 0x200, 0x8, 0x3, 0x4b, 0x7, 0xca0d, 0x15f, 0x2, 0x7f, 0x8, 0x1c0000000000, 0x1f, 0xc]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xf2) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000300)={"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"}) 22:41:07 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000040)={0x4}, &(0x7f0000000100), 0x8) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) dup3(r0, r0, 0x140000) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000140)) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 239.109822] input: syz1 as /devices/virtual/input/input830 [ 239.193904] input: syz1 as /devices/virtual/input/input831 [ 239.205363] input: syz1 as /devices/virtual/input/input833 [ 239.237422] input: syz1 as /devices/virtual/input/input834 22:41:08 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101040, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 239.461312] input: syz1 as /devices/virtual/input/input838 [ 239.505062] input: syz1 as /devices/virtual/input/input842 [ 239.556036] input: syz1 as /devices/virtual/input/input843 22:41:08 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) io_submit(r9, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r6, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r6}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r5}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r8, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r5}]) name_to_handle_at(r6, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r10}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', r10}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3cb5a469730f7b14}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) 22:41:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0xd4ae935d98989a87, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = getegid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r2, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r4, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r7, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) getgroups(0x6, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, r8]) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r10, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r11) getgroups(0x8, &(0x7f00000001c0)=[r1, r3, r5, r6, r9, r11, 0xee00, 0xffffffffffffffff]) [ 239.786419] input: syz1 as /devices/virtual/input/input847 22:41:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f0000001280)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r8, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x9, &(0x7f0000002540)=[{&(0x7f0000000140)="56bf96e3e1b2c1de4e8a20ce6a", 0xd, 0x4}, {&(0x7f0000000180)="721f30400d77c2bcb6c69073d3b2a940a0396a98ee4396fa12b61d7a1f81143bc10a7d568aa94b66bd5fdcbb45c3a9cfe175cc825ff7c7ed9dd90bd2a495274a4afd7c5da2e21fb4b0a7cd2ef7e969c2ebfa6b8dbc5d2b2135f997dc370056a61d84b495d55515fa6b4c9a66ab00f4e566b0960a16bf084bc3f8201fa997918c08346e6a7ce88090c3ababccd4d775572fbb03c2247dab5960c39df75f6f84d1f652a5d9c08f1db7f03a1aec3e7256c8dd05888929210b14447454f0f2228e345d3eda3a058b40731b74d572fba0a71f52bd4610eb27ffcffc515b5f0d07f52da801b2a9355f2571b0c1e527a0f070e2220d649f5b4c27e8f4ee164b086f754e0c2a2286dbef6b97578638f03a0b45a38f08a85645300e792572b265d9d147c09e4e79a2e3e35f12b9e371194d226957ee4faeebd2d6840ff3c52c3a664792b850d0a0dcd67efa2033d74cd7cdf6f2d19f86508d434604af76940f916e2690f63ac32d6fc8bb0add2efbcdf3c0e008aff10153e617429557bd926a28d476f0d43fe715fb0e29cede8db7af838a234c21be354e40036d870e07fd6121fe34455796d7855cfc02d4779dfa9408ca3c82ac9b8d75619596a39db67497b0507edda73f940678daa1ab34ff13273f134900d1ea068feeb4f9b247dbed4549fd044c6b3e16078e260718898075b1a0023e6e25d7ae83b833dc19a5347ecb82dd73f297cbdadcbd7a53ca2d51a1d6beafb6490c13c6dc8e4551e3487c3668b6328bda8adddc09556acfe7e62aee2a98454665f568e3ff96f944f22a81a8d70bf0d07b4471941cfa165d460d9612d383f9fd2a746b11aeef66f64d644c13a2f1fb3c1b65f0cfc65d050602ba760707e2441867302fa45c1bb35fb61d944b76ed75d41cc9b96e57de9062a852b79a4dafec7d46d1490c6975f2d5176cb798895419b16e961f3b93f123232237b6d42c580a68f63052026442b927240a7034d6cc0920e2a03050224ab6ab910ee950db43b144634458d69f1c38e2ed6f2c1f33d1d7a4d6090658700bd7348a75f386b91a20735b7b2742d92c0bd260784c1d6c1110861065787c88444851940ae04f6b0af5333bd09c546406de86680fa1a692c8e03deaa74aee00e21a85c5ffbc51a86357d9aa2d4824edf47d6a9ee338864e389f3a740df61b8c35f61fb6a3ec66cf78fb60b29d52d63377473d463bfbac5edbf36f4c369e8d988adfd28ea4ea8504dcfc41e0aa6d99260b8e1380282d286ce0b48cd9067fa94740fe13726f000665c30fdf2c0b18675a29b514729c18e3d4b3f67e3696a2eae940f4edf54b430370574a0b830d1c6fc8d63727d399ccc6669b7e9b5f30f47f722dfec40552053e2897ad11cfd3a184363a8d4c034fa05479afbaa218a32b6ed1ad4606c07a26dca3bdf523c6943f549974795e43917354a8b84e66cbf153ad9ed52edf49fe73e126374d9232abf2eddd1ddbebef4a7f7700bb88d2db7b64a3cd3ea88aba6722c9e6a511e10fd5aed9dcb5dccdcda1ec029aa667a345e94450b213fb95f41f59ea2650770e5f4cbc7ad3c0110fc4eb21b7e8adebedf87d782e93aecb116b98dcd26a0d913d7b5ffc7b1cdddcc21b0adb533c3668d7ccbe8776ef90db76faaa1658c1b127198142e97f3f4184f13df318d81155948a239d9f35627087fb2108aeeb67ceb020f2a1a851da4f364151425fe5f46c93667074dde3cdcddd3ae249a0d3a9abb3e5cb8fd5509a258cb4e2999e7b2b9d6cc9da8942f863c79d369ebae9ee03652d007462af95e3c4825e737712af30bc6f63bae5cfd245bd989b96fa659fadb22145971df3b7ef58fd53e9b9334aad2f572f3263fb153894c86dfad99b5abbb200ec16345103c0052195f9e787559bbe4ae8eb152e1fe5b3ea6643c128a51cbb19c31f6c2b1d7cbde55c0e403cc6fb36d78773d7c844bf1c11a519a43a8cc2dee126be95d1dd35723533210d3e6f9a4b4b7ce5c64efd5e3662a1c1d75b84b6930f130514e2746b6cfb795a3330649160ec9b27785d75b435603a942959e7500cb546287574d3ada9aecd371db50dc65a3dfc56912e40dbb922c5e53cc864c2f1ae7411de0d03ef5ce15d6210720db45d378deb4b381d909938fe24e29f033f3a7c99d4f3f19c2218db0fd2b69dbea1fae46397164d98d5d7b178aab67b83077ac8f271d75598a97de56b3462c0cc3b2b4d80758b9c65e5ee1d02a5eef75be15a402702d4e8324fc5e0cbbc9b2d14097554198f42a223b0070ce20f20c32a1390e2107c2b6ac7935f122df8b616d05e6b21e4b4721acaf3ab9c2f5b812263fd48c90a3266c5a6629b0700ef991c3a484ab0bca123389e1cdefcf09b44d62514ac2d5b5193a02ab23a033042aedaf52a1e3755fc4a6494886701ef99b41d57b5086e4ce7e3f33135c6452425b6e142953bfaadc4a1a4078178bb196513ef201b5897b95c530c4a1eb77c3dcfc08f049a2bc97a339854fc94cad2dc08796933bfdc77b8cfd5ca785e148a76f13cbbb058d3c5a0367328540da914fc1881a1058c521ad7043f6727e80c1803bb099c70f09be139674eba236686b7c8b5d5366a77ef11190f4bdb378b71a2ff9b446923f94e231bb045cc4cf9edfb7f85a589307a3675c97b3fd786e733657f5922d0f4e782f39df64cfdb0852cfaa9285e56c3827fb0b801a82a0a23f0fe85e98ecbcf925578fc6d2e7cfd3b2a0802d98bf3d7ec4836c7f1f326f9a43d73f6d7229a71e45f9419717fb386de9da146f16a53f7b144e256c12868e1516ec31030d57a188d8c8fe224b028b24d476b5fc86043a3207662b943957ed979b7acdd26a4838a6b67d47c7faa516b8181593e152a444698aa3ece8f150dc0698f442d0f39defa94ac779f312c4a7faebf4f1fa04b240bbd0d19ee15aa46d6febb764b19cd8e685fca4f7168338043e10bd1fe40836d5f619e0ff2177451aa8047e419d827e3ebc7ae7cfd6548686bd0c370c7e23a47a85d76e7f70ea2e1ef64d5fcce3623642b2a5f9a0cdfc8d7ad5d99ab1036d5a6d76faf7564744be4a72e6a982f0be82a91efd00026439e0e0ff840f2a474e1eaad2ad37c7bd05661cbc31cf6c49e07a0fc4c4161c60a9316d700b11f83169b4dad01c6701144dc4747e5f0ca9afd073bb263d22897c8dcf35b8cee9e1e91523878615696c248e9578a4d55485bf8e49a8beed13303dc7b349ab775a74821fcc9973699c2261020d504a585b19cecef206f65cfff3b19f3aa96276a7edde12d90930302f85f83245d8045f3e375d5818eb947b8bbdd8fb9b2c84fbad4db5f09eda9c0f783acc5757e9ffb5e48a0bfd088088a2a18428b6c71e5745324ec93425ba3c73f674bd230c0c6805b3962049deb9f7b23161e6b37f6ee9879d11450d828f07e45369e4c47f0c0b9769d6719d345967250e9dcb32f6f4b2ee5324d044253a28000ea10711ed599809b3f8ee8dd04e4fb4eee2cc09da25bb9bf9c7c6a27381a33c10add05e219fe0a663079a5e68f342ff563665d428ccc73e099f3f853cbbe31138a2a3ff2e6164b8b7487ad5d22cbcdd95204f1c4e792b5565722e7ebbc87d4259924f70274d9d72b6b7e6abb6eadf7cab233a5c3a6b4a147cca30740e7d2b34725c16481d5fc05eb7aafb35c451d2093e51c10abd7aac8b152acd51825af30a972fe730d932c7ffb97fa80e29359109574035716e0ff20549d5dcb041720b3c8f9a758992cda75b8803426713def4f3fde98781daf6f86cf7ad9ad29a9a9ad95112cc9b10ef4a90fc5ebe1df4188bacdb79ed2cd8bd2cb8a75deea8732a7358242005104d9ef9212ff0b75e82d1a50fcfe4f58d989a65df16322c92f86615ae346fdcea18c0730b58ed2a0ce53637aceceeaa6dc8f7797b676674e4cbdfee4a559d7b242e9ba370b0fa5dc23e4ba8e323acdc94e02df563e30e868970a4d9e4954235a5290aaaeac1af52987e808c835eba4b70dda758af7ae8219b768707467dcf60fed0a8ca56ce1c9aa42f24aa4dcdeee9e57dc62eaa3090c01ebd4a774b7562e0567362500100d4b9170a4138163ad4e7aa7a74ba12643b8f74a7ac9f2d3bb84232c1a8685d1f1894dec737cf0b304129b022f5345f4966161b60440f1479f61bdd69ef5636a45505b3ce3f0626872a1e57b7a5daf7eeb25f4ce89027f3e7a7c14506c8630142b34ae7290bdd24ec5ce6cc2ea4e42b7ff924ed08bf55ab848d18019a00a01965367c0b5cf02857101b135c590258002cadeabc9bfd1a8b06c1b31969d49ed351d903a94e32f4ecd810c07218d17a06a5914e82fc565ba7942abec9ee8837a96cc18c66c7b069b8d7614c0fdae496a4a29851d61a21cc9d313f086d10be5dbba715468a8ec9865d7cd3a399cba7e6c3f5fda1d7500245e2e071ee1846d28ed5f2ab76924b7a280c7bb47f2edf9ec7b5732f4364df878391a87a451ef807f770da5ae7366f77194a5076148cae0bccd5174f8ca34be27c41675689371ff343ec0a349bda7d424d3d764af0d948166a7b6161b6980eb139ad467e6ae79a7f95946786b0787279a97f341d192f4508ddbcd71f738c6934486cbf61d67989d5f07c2eb25038bbfdb343951c1ef2f8826d97c700190695e7c97969eca6343ba3a3446edabbdec527a9f5f4f3fe9bd6969d4621308176d3b18b291cdd311e0112029a076cefc16491662b9c99a8576454574ddb896484dced6e9e18b45b64c04defff81dca5371c41cea98bdb9cd1648a39c5122c0a125a7d03ebfaf807c2257f28a7be43bfd022f8f5698fcd16ce363c4671d47924e747155ebd5ea169a8398a898964d5b7b1e56c1ad24bf3eb22b640b77258fbe66dcd66cd9709c174f53568628af1b1f3bbd7f6304a30413bf70d3e9d748cca535924e49dc29056a1743b98176b401a88b0d946d764723e28e56c449209dfe70b582501a6d537865fead7ad55ecc57bfe4ac4383f78ade922096ebe3539d244ddb08ccb123d49b0e978d25eb901ecdcc3d745ac1e50a378346dda169b81f6be17a46eed1b819db638f5643997dff97c27ba82a0d6677603996fc2f53d82933c49e880ba4ceaa8a49b3258047dcc744784b174f5348ea92c00a477185e0c9d6c89313436dcc57b4ef506a5f36d8b9e15c548455f59ec0ccb7a10a3af85ce38fcd6ac267ea099844e96f5467de5a34360efeca7b0ce362eaaa1348cd02f3c21b6bbc1e3a2094c114450fbd1140c6e87af86752753c44a6aad5b309d2c3c5878938953be2dd920cc1e6982d99c14802ff36c9ec34cf109771f857103035d9a9a937f68385ce88fdeb74d20fd63b57c54b72d6adf3e5bf74b4c130df694827d3c522f4a2d407996df3720320cb2aa3f7e7e1f5b02d9f888783a8a318f4cca2a739364d2987f4964df0e6fceed6fab0318a7368a2e085c5faeb6e57dfe31e66eff7d0880eecb0d95d95c7d2335c3616c34e37505d6340de206b79793c4c5ac34cc9d5e2aa94e7eae6b5f504c581a6cbce7594b5e58de3cc1b969eacb9d43399ecc2f9c9909c07876b93de97b22a6498d3b18ce3b4d9c9a3d233c95fb599dbbb13ca7f5bcca064ee6ea7a0f71827ccfb108c6fdd813a25b8527ae25c5761ad91e8a91b1d0e23b3fbf32727f70bfb5c3ea9c3863ac5cb39768edd2ecafbf100df90944eab3b4220a4faae0b7bf0b9c8cb260425564c4533f2473c9da0371a4d61e784b14fad19cc555b8b0314866591f742f200df7305d9aa9e80b2e2d609a372709c1c7443f909c98df29aec5d996b81a350c544e196fe3bb92f7f3dc1", 0x1000, 0xffffffffffff0001}, {&(0x7f0000001180)="d83e60e91bd2b542ebbeaedb7dcb92e43ab7efb65ebe16b0d33a112a3f1c0e8614792f03079e28dc79911906493c6b79f2226afbd3a52f3ac536afefdaa3b746fca87e26f4ef53513330ae3da1f4", 0x4e, 0x2}, {&(0x7f0000001200)="c606028dcb975015ee59a7742e1ce7efdffc76a3008c1597ab20e84f802fb2e8699d0895d1d91f8220ee077c6d41cb4dbb8e3a677245fd9f7304c173c8aac8313203583fce772d49a2b0d4d2ba784d8231da4b34159e9318264726828ea5c25448f2ac8be692c143916dd9f4078d4c5bb177e036dcdfeb04c4e95d7300313f0de74a2a19807b883bc15097e56b8518e07b9752a572a76609a81209a13b8549ab1c9272142ada4749caaf1ffb272e028e13fc8fbce32178ede99f7cc28dff90c9851bdc15b0e0a27e51d22c512d2af2d629e8baa7ba1c06da6dbc", 0xda, 0x7}, {&(0x7f0000001300)="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", 0xfb, 0x100}, {&(0x7f0000001400)="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", 0x1000, 0x5}, {&(0x7f0000002400)="9f0f8826183906f3e765f826e1ca1fc7ac794a428506d007ea", 0x19, 0x1}, {&(0x7f0000002440)="33bdb39c063424c7388da8ca6529b22a6181c0e87618143e0af373baec6a83775a6d6b68ca5e9a88cdc3db08", 0x2c, 0x2dba}, {&(0x7f0000002480)="8e8d8f030bd908b399874fb464a48621484d9acf1e43919caf1935462340f127813d696d493fe2ce0d0cb1df13470e27746ee54197a6a223d83733678b76ebf75819d7e03f383c80a0ec33789bed8e5e6ed0c034c54fbf3ac5a3a8581a50bf9f66820b73c2f6588f849f470ebb7297ad4e688eb4f1a7731fe260396671cfda2233d8db6cde153adaf4a15249f401c6f85f114798670df5cc6e52449ad26a81", 0x9f, 0xffff}], 0x20000, &(0x7f0000002640)={[{@noattrs='noattrs'}], [{@obj_type={'obj_type', 0x3d, 'bdev'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', r2}}, {@subj_type={'subj_type', 0x3d, '}selinux'}}, {@seclabel='seclabel'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 22:41:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='sessionid\x00') ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x10040, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000001c0)={r3, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) 22:41:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0xd4ae935d98989a87, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = getegid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r2, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r4, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r7, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) getgroups(0x6, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, r8]) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r10, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r11) getgroups(0x8, &(0x7f00000001c0)=[r1, r3, r5, r6, r9, r11, 0xee00, 0xffffffffffffffff]) 22:41:08 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000036) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xb4, 0x2, 0x0, 0x0, 0x0, 0x100000000, 0x10100, 0x4, 0x3, 0x7, 0x80000000, 0x1, 0x200, 0x9, 0x47, 0xfffffffeffffffff, 0x6, 0x9, 0x0, 0xfff, 0x8001, 0x0, 0x8, 0xffffffffffffff80, 0x1, 0x2, 0x7e0e7742, 0x8, 0x1, 0x9, 0x10000, 0x7fffffff, 0x80000001, 0x3, 0x9cf3, 0x100, 0x0, 0xfffffffffffffffe, 0x4, @perf_config_ext={0xc1, 0xffffffffffffff5e}, 0x10, 0x6, 0x100000, 0x6, 0x2, 0x10001, 0x41}, r1, 0xe, r0, 0x9) 22:41:08 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 240.189766] input: syz1 as /devices/virtual/input/input853 [ 240.216305] input: syz1 as /devices/virtual/input/input855 22:41:08 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/4096) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x468800) 22:41:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xdfc, 0x80) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0xd4ae935d98989a87, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = getegid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r2, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r4, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r7, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) getgroups(0x6, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, r8]) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r10, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r10, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r11) getgroups(0x8, &(0x7f00000001c0)=[r1, r3, r5, r6, r9, r11, 0xee00, 0xffffffffffffffff]) [ 240.448537] input: syz1 as /devices/virtual/input/input860 [ 240.472045] input: syz1 as /devices/virtual/input/input862 22:41:09 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:09 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/84) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) 22:41:09 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x9}, 0x2) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:09 executing program 3 (fault-call:8 fault-nth:0): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r6, 0xfff}, 0x8) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000040)={0x0, 0x9ce5}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 240.731169] input: syz1 as /devices/virtual/input/input865 [ 240.748430] input: syz1 as /devices/virtual/input/input866 [ 240.811872] FAULT_INJECTION: forcing a failure. [ 240.811872] name failslab, interval 1, probability 0, space 0, times 0 [ 240.829505] input: syz1 as /devices/virtual/input/input869 22:41:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00', 0xb}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 241.313947] input: syz1 as /devices/virtual/input/input871 22:41:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, 0x0, 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:10 executing program 3 (fault-call:8 fault-nth:1): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:10 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x40) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) socket$netlink(0x10, 0x3, 0xd) 22:41:10 executing program 0: socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, 0x0, 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 241.579015] input: syz1 as /devices/virtual/input/input880 [ 241.625081] CPU: 1 PID: 14236 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 241.632249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.641723] Call Trace: [ 241.644342] dump_stack+0x138/0x197 [ 241.648178] should_fail.cold+0x10f/0x159 [ 241.652358] should_failslab+0xdb/0x130 [ 241.656360] kmem_cache_alloc_trace+0x2e9/0x790 [ 241.661167] ? lock_downgrade+0x6e0/0x6e0 [ 241.665509] ? devm_device_remove_groups+0x50/0x50 [ 241.670641] kobject_uevent_env+0x378/0xc23 [ 241.675070] ? wait_for_completion+0x420/0x420 [ 241.679681] kobject_uevent+0x20/0x26 [ 241.683497] device_del+0x65c/0xaa0 [ 241.687146] ? __device_links_no_driver+0x220/0x220 [ 241.692209] ? mark_held_locks+0xb1/0x100 [ 241.696583] cdev_device_del+0x1a/0x70 [ 241.700499] evdev_disconnect+0x42/0xb0 [ 241.704809] __input_unregister_device+0x1eb/0x480 [ 241.709764] input_unregister_device+0xa9/0xf0 [ 241.714545] uinput_destroy_device+0x1ce/0x220 [ 241.719160] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 241.724375] ? uinput_request_submit.part.0+0x290/0x290 [ 241.729853] ? perf_trace_lock+0x109/0x500 [ 241.734211] ? check_preemption_disabled+0x3c/0x250 [ 241.739365] ? perf_trace_lock+0x109/0x500 [ 241.743884] ? __might_sleep+0x93/0xb0 [ 241.747786] ? __fget+0x210/0x370 [ 241.751272] ? uinput_compat_ioctl+0xa0/0xa0 [ 241.755702] uinput_ioctl+0x4a/0x60 [ 241.759370] do_vfs_ioctl+0x7ae/0x1060 [ 241.763679] ? selinux_file_mprotect+0x5d0/0x5d0 [ 241.768562] ? lock_downgrade+0x6e0/0x6e0 [ 241.772814] ? ioctl_preallocate+0x1c0/0x1c0 [ 241.777244] ? __fget+0x237/0x370 [ 241.780720] ? security_file_ioctl+0x89/0xb0 [ 241.785149] SyS_ioctl+0x8f/0xc0 [ 241.788671] ? do_vfs_ioctl+0x1060/0x1060 [ 241.792856] do_syscall_64+0x1e8/0x640 [ 241.796757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.801654] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.806852] RIP: 0033:0x4598e9 [ 241.810051] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.817772] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 241.825141] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 241.832512] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 241.840000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 241.847292] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 [ 241.871437] input: syz1 as /devices/virtual/input/input881 22:41:10 executing program 3 (fault-call:8 fault-nth:2): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 242.096756] input: syz1 as /devices/virtual/input/input886 22:41:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, 0x0, 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000100)=0x9) [ 242.165925] FAULT_INJECTION: forcing a failure. [ 242.165925] name failslab, interval 1, probability 0, space 0, times 0 [ 242.213722] CPU: 1 PID: 14265 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 242.220794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.230178] Call Trace: [ 242.232822] dump_stack+0x138/0x197 [ 242.236563] should_fail.cold+0x10f/0x159 [ 242.240831] should_failslab+0xdb/0x130 [ 242.244827] __kmalloc+0x2f0/0x7a0 [ 242.248380] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 242.254282] ? kobject_uevent_env+0x378/0xc23 [ 242.258811] ? rcu_read_lock_sched_held+0x110/0x130 [ 242.263840] ? kobject_get_path+0xbb/0x1a0 [ 242.268091] kobject_get_path+0xbb/0x1a0 [ 242.272164] ? devm_device_remove_groups+0x50/0x50 [ 242.277112] kobject_uevent_env+0x39c/0xc23 [ 242.281530] ? wait_for_completion+0x420/0x420 [ 242.286136] kobject_uevent+0x20/0x26 [ 242.289950] device_del+0x65c/0xaa0 [ 242.294040] ? __device_links_no_driver+0x220/0x220 [ 242.299070] ? mark_held_locks+0xb1/0x100 [ 242.299088] cdev_device_del+0x1a/0x70 [ 242.299102] evdev_disconnect+0x42/0xb0 [ 242.299114] __input_unregister_device+0x1eb/0x480 [ 242.299128] input_unregister_device+0xa9/0xf0 [ 242.299145] uinput_destroy_device+0x1ce/0x220 [ 242.320719] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 242.320735] ? uinput_request_submit.part.0+0x290/0x290 [ 242.320746] ? perf_trace_lock+0x109/0x500 [ 242.320759] ? check_preemption_disabled+0x3c/0x250 [ 242.320773] ? perf_trace_lock+0x109/0x500 [ 242.320790] ? __might_sleep+0x93/0xb0 [ 242.320802] ? __fget+0x210/0x370 [ 242.356722] ? uinput_compat_ioctl+0xa0/0xa0 [ 242.361137] uinput_ioctl+0x4a/0x60 [ 242.364863] do_vfs_ioctl+0x7ae/0x1060 [ 242.368758] ? selinux_file_mprotect+0x5d0/0x5d0 [ 242.373572] ? lock_downgrade+0x6e0/0x6e0 [ 242.377843] ? ioctl_preallocate+0x1c0/0x1c0 [ 242.382260] ? __fget+0x237/0x370 [ 242.382279] ? security_file_ioctl+0x89/0xb0 [ 242.390150] SyS_ioctl+0x8f/0xc0 [ 242.393528] ? do_vfs_ioctl+0x1060/0x1060 [ 242.397693] do_syscall_64+0x1e8/0x640 [ 242.401772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.406741] entry_SYSCALL_64_after_hwframe+0x42/0xb7 22:41:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x771, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x584, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xda30}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x4800, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000180)="71c705bd5173fd6420fdd4442834346152c67145282b948ace28cdde7eef421d7477e2cc116982c79b9ca6a517ce860f729c1bd98c9c5cdc18f71d3368d84b49fb44f2efd3cff004292ee7130610dc97c602a8be8bff06602c11da3843d0049cc5da383e65d2bbdad0bafb0bc981d3b84eae1bfaaa312b6c3509b64876a161f20cb8c895e66b930584e3402a8f3b90668405696aa39365c3de4c877dc5979f24e23f998680ce137a79f97e67f2ecc3862ec5012204", {0x31f, 0x2, 0x34424752, 0x9, 0x3, 0x4571b81b, 0xc, 0x100000001}}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x400000) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0xfdd5, 0xd7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4c450fa3bc74494, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:11 executing program 3 (fault-call:8 fault-nth:4): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 243.217771] input: syz1 as /devices/virtual/input/input901 [ 243.316085] input: syz1 as /devices/virtual/input/input902 [ 243.333908] input: syz1 as /devices/virtual/input/input904 [ 243.352417] input: syz1 as /devices/virtual/input/input905 [ 243.386794] input: syz1 as /devices/virtual/input/input906 [ 243.407373] FAULT_INJECTION: forcing a failure. [ 243.407373] name failslab, interval 1, probability 0, space 0, times 0 [ 243.466877] CPU: 1 PID: 14326 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 243.474044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.483409] Call Trace: [ 243.486025] dump_stack+0x138/0x197 [ 243.489859] should_fail.cold+0x10f/0x159 [ 243.494059] should_failslab+0xdb/0x130 [ 243.498066] kmem_cache_alloc_node+0x287/0x780 [ 243.502692] __alloc_skb+0x9c/0x500 [ 243.506332] ? skb_scrub_packet+0x4b0/0x4b0 [ 243.510668] ? netlink_has_listeners+0x20a/0x330 [ 243.515440] kobject_uevent_env+0x781/0xc23 [ 243.519775] ? wait_for_completion+0x420/0x420 [ 243.524377] kobject_uevent+0x20/0x26 [ 243.528189] device_del+0x65c/0xaa0 [ 243.531829] ? __device_links_no_driver+0x220/0x220 [ 243.536960] ? mark_held_locks+0xb1/0x100 [ 243.541125] cdev_device_del+0x1a/0x70 [ 243.545025] evdev_disconnect+0x42/0xb0 [ 243.549015] __input_unregister_device+0x1eb/0x480 [ 243.553968] input_unregister_device+0xa9/0xf0 [ 243.558565] uinput_destroy_device+0x1ce/0x220 [ 243.563256] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 243.568466] ? uinput_request_submit.part.0+0x290/0x290 [ 243.573846] ? perf_trace_lock+0x109/0x500 [ 243.578184] ? check_preemption_disabled+0x3c/0x250 [ 243.583220] ? perf_trace_lock+0x109/0x500 [ 243.587473] ? __might_sleep+0x93/0xb0 [ 243.591374] ? __fget+0x210/0x370 [ 243.595021] ? uinput_compat_ioctl+0xa0/0xa0 [ 243.599500] uinput_ioctl+0x4a/0x60 [ 243.603230] do_vfs_ioctl+0x7ae/0x1060 [ 243.607224] ? selinux_file_mprotect+0x5d0/0x5d0 [ 243.612283] ? lock_downgrade+0x6e0/0x6e0 [ 243.616447] ? ioctl_preallocate+0x1c0/0x1c0 [ 243.620872] ? __fget+0x237/0x370 [ 243.624352] ? security_file_ioctl+0x89/0xb0 [ 243.629215] SyS_ioctl+0x8f/0xc0 [ 243.632596] ? do_vfs_ioctl+0x1060/0x1060 [ 243.636757] do_syscall_64+0x1e8/0x640 [ 243.640768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.645634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.650984] RIP: 0033:0x4598e9 [ 243.654230] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:41:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 243.852167] input: syz1 as /devices/virtual/input/input911 [ 243.885671] input: syz1 as /devices/virtual/input/input912 [ 243.914773] FAULT_INJECTION: forcing a failure. [ 243.914773] name failslab, interval 1, probability 0, space 0, times 0 [ 243.959661] CPU: 1 PID: 14345 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 243.966729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.976097] Call Trace: [ 243.978737] dump_stack+0x138/0x197 [ 243.982386] should_fail.cold+0x10f/0x159 [ 243.986556] should_failslab+0xdb/0x130 [ 243.992643] kmem_cache_alloc_node+0x287/0x780 [ 243.997254] __alloc_skb+0x9c/0x500 [ 244.000998] ? skb_scrub_packet+0x4b0/0x4b0 [ 244.005325] ? netlink_has_listeners+0x20a/0x330 [ 244.005341] kobject_uevent_env+0x781/0xc23 [ 244.005353] ? wait_for_completion+0x420/0x420 [ 244.019152] kobject_uevent+0x20/0x26 [ 244.022955] device_del+0x65c/0xaa0 [ 244.022969] ? __device_links_no_driver+0x220/0x220 [ 244.022982] ? mark_held_locks+0xb1/0x100 [ 244.022998] cdev_device_del+0x1a/0x70 [ 244.023010] evdev_disconnect+0x42/0xb0 [ 244.023021] __input_unregister_device+0x1eb/0x480 [ 244.035801] input_unregister_device+0xa9/0xf0 [ 244.035815] uinput_destroy_device+0x1ce/0x220 [ 244.048598] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 244.048612] ? uinput_request_submit.part.0+0x290/0x290 [ 244.068307] ? perf_trace_lock+0x109/0x500 [ 244.072556] ? check_preemption_disabled+0x3c/0x250 [ 244.077612] ? perf_trace_lock+0x109/0x500 [ 244.081863] ? __might_sleep+0x93/0xb0 [ 244.085762] ? __fget+0x210/0x370 [ 244.089233] ? uinput_compat_ioctl+0xa0/0xa0 [ 244.093650] uinput_ioctl+0x4a/0x60 [ 244.097301] do_vfs_ioctl+0x7ae/0x1060 [ 244.101199] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.105963] ? lock_downgrade+0x6e0/0x6e0 [ 244.110120] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.114803] ? __fget+0x237/0x370 [ 244.118274] ? security_file_ioctl+0x89/0xb0 [ 244.122701] SyS_ioctl+0x8f/0xc0 [ 244.126355] ? do_vfs_ioctl+0x1060/0x1060 [ 244.130540] do_syscall_64+0x1e8/0x640 [ 244.134524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.139389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.144609] RIP: 0033:0x4598e9 [ 244.147826] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.156330] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 244.163881] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 244.171343] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 244.178753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 244.186262] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000100)=0x58e, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 244.343685] input: syz1 as /devices/virtual/input/input916 22:41:13 executing program 3 (fault-call:8 fault-nth:6): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 244.415850] input: syz1 as /devices/virtual/input/input917 [ 244.455768] input: syz1 as /devices/virtual/input/input919 [ 244.502827] input: syz1 as /devices/virtual/input/input921 22:41:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 244.593243] FAULT_INJECTION: forcing a failure. [ 244.593243] name failslab, interval 1, probability 0, space 0, times 0 [ 244.617871] CPU: 1 PID: 14372 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 244.625104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.634473] Call Trace: [ 244.637075] dump_stack+0x138/0x197 [ 244.640729] should_fail.cold+0x10f/0x159 [ 244.645116] should_failslab+0xdb/0x130 [ 244.649208] kmem_cache_alloc_node_trace+0x280/0x770 [ 244.654340] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 244.659817] __kmalloc_node_track_caller+0x3d/0x80 [ 244.664775] __kmalloc_reserve.isra.0+0x40/0xe0 [ 244.669456] __alloc_skb+0xcf/0x500 [ 244.669469] ? skb_scrub_packet+0x4b0/0x4b0 [ 244.669482] ? netlink_has_listeners+0x20a/0x330 [ 244.669499] kobject_uevent_env+0x781/0xc23 [ 244.669510] ? wait_for_completion+0x420/0x420 [ 244.682255] kobject_uevent+0x20/0x26 [ 244.682267] device_del+0x65c/0xaa0 [ 244.682279] ? __device_links_no_driver+0x220/0x220 [ 244.682300] cdev_device_del+0x1a/0x70 [ 244.682313] evdev_disconnect+0x42/0xb0 [ 244.698623] __input_unregister_device+0x1eb/0x480 [ 244.698639] input_unregister_device+0xa9/0xf0 [ 244.698651] uinput_destroy_device+0x1ce/0x220 [ 244.698666] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 244.716465] ? uinput_request_submit.part.0+0x290/0x290 [ 244.716477] ? perf_trace_lock+0x109/0x500 [ 244.716490] ? check_preemption_disabled+0x3c/0x250 [ 244.716507] ? perf_trace_lock+0x109/0x500 [ 244.736392] ? __might_sleep+0x93/0xb0 [ 244.736404] ? __fget+0x210/0x370 [ 244.736421] ? uinput_compat_ioctl+0xa0/0xa0 [ 244.736429] uinput_ioctl+0x4a/0x60 [ 244.736440] do_vfs_ioctl+0x7ae/0x1060 [ 244.736452] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.745722] ? lock_downgrade+0x6e0/0x6e0 [ 244.757272] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.757293] ? __fget+0x237/0x370 [ 244.757310] ? security_file_ioctl+0x89/0xb0 [ 244.774046] SyS_ioctl+0x8f/0xc0 22:41:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) [ 244.774057] ? do_vfs_ioctl+0x1060/0x1060 [ 244.774072] do_syscall_64+0x1e8/0x640 [ 244.774081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.774098] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.786074] RIP: 0033:0x4598e9 [ 244.786086] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.786099] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 244.786104] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 22:41:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x142a8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 244.786111] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 244.793975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 244.793982] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:13 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x800000000d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) socket$isdn(0x22, 0x3, 0x0) 22:41:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:13 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/d\x00\x00\x01\x00inpu^\x00', 0x66e382bdd9a04d5f, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x8}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') write$binfmt_aout(r1, &(0x7f0000000100)={{0x107, 0x8, 0x2, 0x1b1, 0x1cd, 0x0, 0x1ea, 0xfff}, "aeaf27b884a2ed678af222004e952d6d22d102ef7b043b5b21995e815c0b5fb8662a6366a942df04adc5f12fbda72929a7203442465baa92951967f9edbef0076ad52635a5951196348a3c1ddaf539a589ce751166ff47ac9a734d6d8f90ee1d1d7d26f7544128b3ea5224d005f6f16895ddb862ca79137f5f6a61dd6d8d5417445bcddf864fe462e8b13b65a69a76fa63d20755910ac69f4968e23f39d8e4b8f2eb3767fbde5126d8e9be89e8047241828a348a6ca3ecc143b492dc3c6c336e7e2a0476d71530"}, 0xe7) [ 245.099272] input: syz1 as /devices/virtual/input/input926 22:41:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, 0xfffffffffffffffd, 0x1c1402, 0x0) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x180000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\x00\x01\x00', 0xc01, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04", 0xb) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x20001367}], 0x1}}], 0x1, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:13 executing program 3 (fault-call:8 fault-nth:7): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.270718] input: syz1 as /devices/virtual/input/input938 [ 245.330950] FAULT_INJECTION: forcing a failure. [ 245.330950] name failslab, interval 1, probability 0, space 0, times 0 [ 245.389586] CPU: 0 PID: 14417 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 245.396773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.406221] Call Trace: [ 245.408867] dump_stack+0x138/0x197 [ 245.412514] should_fail.cold+0x10f/0x159 [ 245.416689] should_failslab+0xdb/0x130 [ 245.420681] kmem_cache_alloc_node+0x287/0x780 [ 245.425716] __alloc_skb+0x9c/0x500 [ 245.429436] ? skb_scrub_packet+0x4b0/0x4b0 [ 245.433795] ? netlink_has_listeners+0x20a/0x330 [ 245.438572] kobject_uevent_env+0x781/0xc23 [ 245.442926] ? wait_for_completion+0x420/0x420 [ 245.447738] kobject_uevent+0x20/0x26 [ 245.451553] device_del+0x65c/0xaa0 [ 245.455202] ? __device_links_no_driver+0x220/0x220 [ 245.460235] ? mark_held_locks+0xb1/0x100 [ 245.464406] cdev_device_del+0x1a/0x70 [ 245.468304] evdev_disconnect+0x42/0xb0 [ 245.468315] __input_unregister_device+0x1eb/0x480 [ 245.468328] input_unregister_device+0xa9/0xf0 [ 245.482281] uinput_destroy_device+0x1ce/0x220 22:41:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinp\x7ft\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:14 executing program 3 (fault-call:8 fault-nth:8): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:14 executing program 3 (fault-call:8 fault-nth:9): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 246.309557] input: syz1 as /devices/virtual/input/input947 [ 246.326632] input: syz1 as /devices/virtual/input/input948 [ 246.396064] FAULT_INJECTION: forcing a failure. [ 246.396064] name failslab, interval 1, probability 0, space 0, times 0 [ 246.425880] CPU: 0 PID: 14473 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 246.432956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.442319] Call Trace: [ 246.444925] dump_stack+0x138/0x197 [ 246.448573] should_fail.cold+0x10f/0x159 [ 246.452833] should_failslab+0xdb/0x130 [ 246.456830] kmem_cache_alloc_node_trace+0x280/0x770 [ 246.461960] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 246.467445] __kmalloc_node_track_caller+0x3d/0x80 [ 246.472398] __kmalloc_reserve.isra.0+0x40/0xe0 [ 246.477089] __alloc_skb+0xcf/0x500 [ 246.480731] ? skb_scrub_packet+0x4b0/0x4b0 [ 246.485354] ? netlink_has_listeners+0x20a/0x330 [ 246.490127] kobject_uevent_env+0x781/0xc23 [ 246.494465] ? wait_for_completion+0x420/0x420 [ 246.499073] kobject_uevent+0x20/0x26 [ 246.502884] device_del+0x65c/0xaa0 [ 246.506524] ? __device_links_no_driver+0x220/0x220 [ 246.511901] ? mark_held_locks+0xb1/0x100 [ 246.516061] cdev_device_del+0x1a/0x70 [ 246.519959] evdev_disconnect+0x42/0xb0 [ 246.523953] __input_unregister_device+0x1eb/0x480 [ 246.528902] input_unregister_device+0xa9/0xf0 [ 246.533591] uinput_destroy_device+0x1ce/0x220 [ 246.538205] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 246.543405] ? uinput_request_submit.part.0+0x290/0x290 [ 246.548824] ? perf_trace_lock+0x109/0x500 [ 246.553065] ? check_preemption_disabled+0x3c/0x250 [ 246.558108] ? perf_trace_lock+0x109/0x500 [ 246.562359] ? __might_sleep+0x93/0xb0 [ 246.566250] ? __fget+0x210/0x370 [ 246.569981] ? uinput_compat_ioctl+0xa0/0xa0 [ 246.574403] uinput_ioctl+0x4a/0x60 [ 246.578034] do_vfs_ioctl+0x7ae/0x1060 [ 246.581929] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.586689] ? lock_downgrade+0x6e0/0x6e0 [ 246.590846] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.595263] ? __fget+0x237/0x370 [ 246.598991] ? security_file_ioctl+0x89/0xb0 [ 246.603404] SyS_ioctl+0x8f/0xc0 [ 246.606776] ? do_vfs_ioctl+0x1060/0x1060 [ 246.610934] do_syscall_64+0x1e8/0x640 [ 246.614826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.619683] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.626617] RIP: 0033:0x4598e9 [ 246.629809] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.637527] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 22:41:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000100)) 22:41:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0xe, 0x2, {0xae, 0x1, 0x7ff, {0x100, 0x7}, {0x4a168449, 0x100000001}, @rumble={0xe4b, 0x4bd1}}, {0x57, 0x6, 0x6, {0xe17c, 0x9}, {0xd49, 0x8}, @cond=[{0x2, 0x3d0000000000000, 0x1, 0x8, 0x9, 0x2deb}, {0x80000000, 0x7, 0x19e, 0xdb6b, 0x8, 0x4d83b3dd}]}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 246.645228] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 246.653115] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 246.660399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 246.667695] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:15 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:15 executing program 3 (fault-call:8 fault-nth:10): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 246.804589] input: syz1 as /devices/virtual/input/input952 [ 246.826224] input: syz1 as /devices/virtual/input/input953 [ 246.883217] FAULT_INJECTION: forcing a failure. [ 246.883217] name failslab, interval 1, probability 0, space 0, times 0 [ 246.918900] CPU: 1 PID: 14499 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 246.925970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.935337] Call Trace: [ 246.937938] dump_stack+0x138/0x197 [ 246.941588] should_fail.cold+0x10f/0x159 [ 246.945841] should_failslab+0xdb/0x130 [ 246.949836] kmem_cache_alloc_node_trace+0x280/0x770 [ 246.955060] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 246.960642] __kmalloc_node_track_caller+0x3d/0x80 [ 246.965603] __kmalloc_reserve.isra.0+0x40/0xe0 [ 246.970288] __alloc_skb+0xcf/0x500 [ 246.973928] ? skb_scrub_packet+0x4b0/0x4b0 [ 246.978257] ? netlink_has_listeners+0x20a/0x330 [ 246.983029] kobject_uevent_env+0x781/0xc23 [ 246.987350] ? wait_for_completion+0x420/0x420 [ 246.991952] kobject_uevent+0x20/0x26 [ 246.995762] device_del+0x65c/0xaa0 [ 246.999403] ? __device_links_no_driver+0x220/0x220 [ 247.004431] ? mark_held_locks+0xb1/0x100 [ 247.008578] cdev_device_del+0x1a/0x70 [ 247.012460] evdev_disconnect+0x42/0xb0 [ 247.012474] __input_unregister_device+0x1eb/0x480 [ 247.012487] input_unregister_device+0xa9/0xf0 [ 247.012498] uinput_destroy_device+0x1ce/0x220 [ 247.012513] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 247.012524] ? uinput_request_submit.part.0+0x290/0x290 [ 247.012538] ? perf_trace_lock+0x109/0x500 [ 247.036302] ? check_preemption_disabled+0x3c/0x250 [ 247.036321] ? perf_trace_lock+0x109/0x500 [ 247.036336] ? __might_sleep+0x93/0xb0 [ 247.059038] ? __fget+0x210/0x370 [ 247.059058] ? uinput_compat_ioctl+0xa0/0xa0 [ 247.059066] uinput_ioctl+0x4a/0x60 [ 247.059078] do_vfs_ioctl+0x7ae/0x1060 [ 247.074557] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.079315] ? lock_downgrade+0x6e0/0x6e0 [ 247.079331] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.079344] ? __fget+0x237/0x370 [ 247.079361] ? security_file_ioctl+0x89/0xb0 [ 247.095749] SyS_ioctl+0x8f/0xc0 [ 247.099125] ? do_vfs_ioctl+0x1060/0x1060 [ 247.103289] do_syscall_64+0x1e8/0x640 [ 247.103300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.103324] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.117240] RIP: 0033:0x4598e9 [ 247.117247] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:41:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x819, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'bond_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0x1, 0xff2, 0x5, 0x9d74}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={r4, 0x9, 0x1e, "d22dabd63003c6192d3ae872b4bddc892768a91b97a3115adac6a293df22"}, 0x26) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x3, 0x6f11, 0x7, 0xff, 0x0, 0xa8}) [ 247.378464] input: syz1 as /devices/virtual/input/input964 [ 247.398496] FAULT_INJECTION: forcing a failure. [ 247.398496] name failslab, interval 1, probability 0, space 0, times 0 [ 247.431568] CPU: 1 PID: 14519 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 247.438649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.448111] Call Trace: [ 247.450851] dump_stack+0x138/0x197 [ 247.454510] should_fail.cold+0x10f/0x159 [ 247.458692] should_failslab+0xdb/0x130 [ 247.462689] kmem_cache_alloc_node+0x287/0x780 [ 247.467307] __alloc_skb+0x9c/0x500 [ 247.470957] ? skb_scrub_packet+0x4b0/0x4b0 [ 247.475302] ? netlink_has_listeners+0x20a/0x330 [ 247.480726] kobject_uevent_env+0x781/0xc23 [ 247.485073] ? wait_for_completion+0x420/0x420 [ 247.489724] kobject_uevent+0x20/0x26 [ 247.493546] device_del+0x65c/0xaa0 [ 247.497189] ? __device_links_no_driver+0x220/0x220 [ 247.497207] ? mark_held_locks+0xb1/0x100 [ 247.497228] cdev_device_del+0x1a/0x70 [ 247.497245] evdev_disconnect+0x42/0xb0 [ 247.514358] __input_unregister_device+0x1eb/0x480 [ 247.514380] input_unregister_device+0xa9/0xf0 [ 247.514397] uinput_destroy_device+0x1ce/0x220 [ 247.529927] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 247.535141] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 247.540273] ? uinput_request_submit.part.0+0x290/0x290 [ 247.545657] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 247.550787] ? perf_trace_run_bpf_submit+0x113/0x170 [ 247.555936] ? __might_sleep+0x93/0xb0 [ 247.559928] ? __fget+0x210/0x370 [ 247.563410] ? uinput_compat_ioctl+0xa0/0xa0 [ 247.567836] uinput_ioctl+0x4a/0x60 [ 247.571480] do_vfs_ioctl+0x7ae/0x1060 [ 247.575393] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.580341] ? lock_downgrade+0x6e0/0x6e0 [ 247.584512] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.589125] ? __fget+0x237/0x370 [ 247.592607] ? security_file_ioctl+0x89/0xb0 [ 247.597044] SyS_ioctl+0x8f/0xc0 [ 247.600433] ? do_vfs_ioctl+0x1060/0x1060 [ 247.604606] do_syscall_64+0x1e8/0x640 [ 247.608518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.613393] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.618685] RIP: 0033:0x4598e9 [ 247.621895] RSP: 002b:00007f8e11677c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:41:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tabmes_matches\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc0800) setsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000100)="3111d92c913239133755b499c1c2d2f04f15ac9cd2c908c5cdd4b1d1afdd76fb635750216e848e5d6939efc28c8be1c301c94b0b7609e485cd3e2d7f6d1809c358e876a671e60d7067e7682c9a6a8e9da34e5bda5967d51ae793009ebbf1c51edd5101efbe49c28500ff74e2604e5fa18f35091361d8106a1bbe2d7d2ed3453d5865250ed32c1e3acb94cc4423b4fcd49552d7acb430f79dd9eac8e622d574650432315d3664855fb3701353f7719d6c1a065e9174d2c30f2b97c64eb726cb0672bbbf8a2172f8955fdc0f4b0373f245f63182736c8fb3b6d0f3d0fa61dd1f6851db73f70148", 0xe6) 22:41:16 executing program 3 (fault-call:8 fault-nth:12): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 247.892779] input: syz1 as /devices/virtual/input/input976 [ 247.929752] FAULT_INJECTION: forcing a failure. [ 247.929752] name failslab, interval 1, probability 0, space 0, times 0 [ 247.968381] CPU: 1 PID: 14549 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 247.975462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.985017] Call Trace: [ 247.987632] dump_stack+0x138/0x197 [ 247.991302] should_fail.cold+0x10f/0x159 [ 247.995484] should_failslab+0xdb/0x130 [ 247.999492] kmem_cache_alloc_node+0x287/0x780 [ 248.004114] __alloc_skb+0x9c/0x500 [ 248.007755] ? skb_scrub_packet+0x4b0/0x4b0 [ 248.012090] ? netlink_has_listeners+0x20a/0x330 [ 248.016869] kobject_uevent_env+0x781/0xc23 [ 248.021203] ? wait_for_completion+0x420/0x420 [ 248.025816] kobject_uevent+0x20/0x26 [ 248.029630] device_del+0x65c/0xaa0 [ 248.033275] ? __device_links_no_driver+0x220/0x220 [ 248.038309] ? mark_held_locks+0xb1/0x100 [ 248.042481] cdev_device_del+0x1a/0x70 [ 248.046387] evdev_disconnect+0x42/0xb0 [ 248.050377] __input_unregister_device+0x1eb/0x480 [ 248.055351] input_unregister_device+0xa9/0xf0 [ 248.059946] uinput_destroy_device+0x1ce/0x220 [ 248.064558] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 248.069774] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 248.074901] ? uinput_request_submit.part.0+0x290/0x290 [ 248.080289] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 248.085410] ? perf_trace_run_bpf_submit+0x113/0x170 [ 248.090552] ? __might_sleep+0x93/0xb0 [ 248.094445] ? __fget+0x210/0x370 [ 248.097923] ? uinput_compat_ioctl+0xa0/0xa0 [ 248.102350] uinput_ioctl+0x4a/0x60 [ 248.105991] do_vfs_ioctl+0x7ae/0x1060 [ 248.109892] ? selinux_file_mprotect+0x5d0/0x5d0 [ 248.114655] ? lock_downgrade+0x6e0/0x6e0 [ 248.118820] ? ioctl_preallocate+0x1c0/0x1c0 [ 248.123244] ? __fget+0x237/0x370 [ 248.126719] ? security_file_ioctl+0x89/0xb0 [ 248.131141] SyS_ioctl+0x8f/0xc0 [ 248.134701] ? do_vfs_ioctl+0x1060/0x1060 [ 248.138952] do_syscall_64+0x1e8/0x640 [ 248.142856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.147732] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.152940] RIP: 0033:0x4598e9 [ 248.156147] RSP: 002b:00007f8e11677c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.164049] RAX: ffffffffffffffda RBX: 00007f8e11677c90 RCX: 00000000004598e9 [ 248.171333] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 248.178624] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.185912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116786d4 [ 248.193197] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0xc0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/avc/5achehreshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4094) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x16e1391d20dcb940}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 248.392380] input: syz1 as /devices/virtual/input/input977 22:41:17 executing program 3 (fault-call:8 fault-nth:13): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 248.497320] input: syz1 as /devices/virtual/input/input979 22:41:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000100)={{0x3, @name="a1cf08b6500acb6f20b8ed6b7a0d35076eee7f6a44d608caf385f272b6b7d111"}, 0x8, 0x3f, 0xedc}) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 248.565776] input: syz1 as /devices/virtual/input/input980 [ 248.603415] FAULT_INJECTION: forcing a failure. [ 248.603415] name failslab, interval 1, probability 0, space 0, times 0 [ 248.627497] CPU: 1 PID: 14577 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 248.634586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.634594] Call Trace: [ 248.634615] dump_stack+0x138/0x197 [ 248.634639] should_fail.cold+0x10f/0x159 [ 248.654698] should_failslab+0xdb/0x130 [ 248.658689] kmem_cache_alloc_node+0x287/0x780 [ 248.663309] __alloc_skb+0x9c/0x500 [ 248.666955] ? skb_scrub_packet+0x4b0/0x4b0 [ 248.671301] ? netlink_has_listeners+0x20a/0x330 [ 248.676085] kobject_uevent_env+0x781/0xc23 [ 248.680425] ? wait_for_completion+0x420/0x420 [ 248.685048] kobject_uevent+0x20/0x26 [ 248.688870] device_del+0x65c/0xaa0 [ 248.692546] ? __device_links_no_driver+0x220/0x220 [ 248.697586] ? mark_held_locks+0xb1/0x100 [ 248.701933] cdev_device_del+0x1a/0x70 [ 248.705844] evdev_disconnect+0x42/0xb0 [ 248.709843] __input_unregister_device+0x1eb/0x480 [ 248.714797] input_unregister_device+0xa9/0xf0 [ 248.719422] uinput_destroy_device+0x1ce/0x220 [ 248.724033] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 248.729326] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 248.734454] ? uinput_request_submit.part.0+0x290/0x290 [ 248.739837] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 248.744967] ? perf_trace_run_bpf_submit+0x113/0x170 [ 248.750542] ? __might_sleep+0x93/0xb0 [ 248.754451] ? __fget+0x210/0x370 [ 248.758207] ? uinput_compat_ioctl+0xa0/0xa0 [ 248.762627] uinput_ioctl+0x4a/0x60 [ 248.766276] do_vfs_ioctl+0x7ae/0x1060 [ 248.770190] ? selinux_file_mprotect+0x5d0/0x5d0 [ 248.775057] ? lock_downgrade+0x6e0/0x6e0 [ 248.779226] ? ioctl_preallocate+0x1c0/0x1c0 [ 248.783659] ? __fget+0x237/0x370 [ 248.787139] ? security_file_ioctl+0x89/0xb0 [ 248.791566] SyS_ioctl+0x8f/0xc0 [ 248.794970] ? do_vfs_ioctl+0x1060/0x1060 [ 248.799127] do_syscall_64+0x1e8/0x640 [ 248.803178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.808032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.813218] RIP: 0033:0x4598e9 [ 248.813230] RSP: 002b:00007f8e11677c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.824418] RAX: ffffffffffffffda RBX: 00007f8e11677c90 RCX: 00000000004598e9 [ 248.831705] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 248.839217] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.846498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116786d4 [ 248.854128] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:17 executing program 3 (fault-call:8 fault-nth:14): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:17 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x42) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x80000}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r1, r3}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a]\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='pstore\x00', 0x80, 0x0) [ 248.929883] input: syz1 as /devices/virtual/input/input982 [ 249.025981] input: syz1 as /devices/virtual/input/input984 [ 249.049949] input: syz1 as /devices/virtual/input/input983 [ 249.112299] FAULT_INJECTION: forcing a failure. [ 249.112299] name failslab, interval 1, probability 0, space 0, times 0 [ 249.136085] CPU: 1 PID: 14604 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 249.143231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.152778] Call Trace: [ 249.155381] dump_stack+0x138/0x197 [ 249.159030] should_fail.cold+0x10f/0x159 [ 249.163201] should_failslab+0xdb/0x130 [ 249.167189] kmem_cache_alloc_node+0x287/0x780 [ 249.171789] __alloc_skb+0x9c/0x500 [ 249.175423] ? skb_scrub_packet+0x4b0/0x4b0 [ 249.179757] ? netlink_has_listeners+0x20a/0x330 [ 249.184525] kobject_uevent_env+0x781/0xc23 [ 249.189228] ? wait_for_completion+0x420/0x420 [ 249.193840] kobject_uevent+0x20/0x26 [ 249.193852] device_del+0x65c/0xaa0 [ 249.201283] ? __device_links_no_driver+0x220/0x220 [ 249.206303] ? mark_held_locks+0xb1/0x100 [ 249.210455] cdev_device_del+0x1a/0x70 [ 249.210470] evdev_disconnect+0x42/0xb0 [ 249.210481] __input_unregister_device+0x1eb/0x480 [ 249.210492] input_unregister_device+0xa9/0xf0 [ 249.210504] uinput_destroy_device+0x1ce/0x220 [ 249.210518] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 249.210531] ? uinput_request_submit.part.0+0x290/0x290 [ 249.243181] ? perf_trace_lock+0x109/0x500 [ 249.247433] ? check_preemption_disabled+0x3c/0x250 [ 249.252475] ? perf_trace_lock+0x109/0x500 [ 249.256728] ? __might_sleep+0x93/0xb0 [ 249.260623] ? __fget+0x210/0x370 [ 249.264094] ? uinput_compat_ioctl+0xa0/0xa0 [ 249.268508] uinput_ioctl+0x4a/0x60 [ 249.272147] do_vfs_ioctl+0x7ae/0x1060 [ 249.276101] ? selinux_file_mprotect+0x5d0/0x5d0 [ 249.280873] ? lock_downgrade+0x6e0/0x6e0 [ 249.285032] ? ioctl_preallocate+0x1c0/0x1c0 [ 249.289453] ? __fget+0x237/0x370 [ 249.292926] ? security_file_ioctl+0x89/0xb0 [ 249.297346] SyS_ioctl+0x8f/0xc0 [ 249.300724] ? do_vfs_ioctl+0x1060/0x1060 [ 249.304896] do_syscall_64+0x1e8/0x640 [ 249.308796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.313657] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.318876] RIP: 0033:0x4598e9 [ 249.322071] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.329788] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 249.337068] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 249.344346] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 249.351632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 22:41:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x12, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 249.359008] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:18 executing program 3 (fault-call:8 fault-nth:15): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={r8}, &(0x7f0000000240)=0x8) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000140)={r12}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001e00)={0x81, 0x200, 0x17, 0x7fffffff, 0x25, 0x1, 0x1ff, 0x800, r12}, &(0x7f0000002040)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000002080)={r13, 0x40000000000}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000002100)={r8, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000021c0)={0x60000000, 0x102, "9067e563997e4d1182503c6de169d7a4ab5b8cac839dd9c6a3c3fc0897e5bfbf", 0x7, 0x4, 0x8, 0x3, 0xa88, 0x7, 0xfffffffffffffffd, 0x101, [0x8, 0x0, 0x7, 0x8]}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:18 executing program 1: [ 249.586213] input: syz1 as /devices/virtual/input/input986 22:41:18 executing program 1: [ 249.643126] input: syz1 as /devices/virtual/input/input988 [ 249.661209] FAULT_INJECTION: forcing a failure. [ 249.661209] name failslab, interval 1, probability 0, space 0, times 0 [ 249.721234] CPU: 1 PID: 14627 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 249.728657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.738104] Call Trace: [ 249.740710] dump_stack+0x138/0x197 [ 249.744364] should_fail.cold+0x10f/0x159 [ 249.748627] should_failslab+0xdb/0x130 [ 249.752633] kmem_cache_alloc_node_trace+0x280/0x770 [ 249.757758] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 249.763841] __kmalloc_node_track_caller+0x3d/0x80 [ 249.768830] __kmalloc_reserve.isra.0+0x40/0xe0 [ 249.773527] __alloc_skb+0xcf/0x500 [ 249.777297] ? skb_scrub_packet+0x4b0/0x4b0 [ 249.781723] ? netlink_has_listeners+0x20a/0x330 [ 249.786501] kobject_uevent_env+0x781/0xc23 [ 249.790837] ? wait_for_completion+0x420/0x420 [ 249.795470] kobject_uevent+0x20/0x26 [ 249.799288] device_del+0x65c/0xaa0 [ 249.802939] ? __device_links_no_driver+0x220/0x220 [ 249.807979] ? mark_held_locks+0xb1/0x100 [ 249.812147] cdev_device_del+0x1a/0x70 [ 249.816160] evdev_disconnect+0x42/0xb0 [ 249.820149] __input_unregister_device+0x1eb/0x480 [ 249.825096] input_unregister_device+0xa9/0xf0 [ 249.829693] uinput_destroy_device+0x1ce/0x220 [ 249.834295] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 249.839504] ? uinput_request_submit.part.0+0x290/0x290 [ 249.844888] ? perf_trace_lock+0x109/0x500 [ 249.849238] ? check_preemption_disabled+0x3c/0x250 [ 249.854277] ? perf_trace_lock+0x109/0x500 [ 249.858538] ? __might_sleep+0x93/0xb0 [ 249.862443] ? __fget+0x210/0x370 [ 249.865945] ? uinput_compat_ioctl+0xa0/0xa0 [ 249.870391] uinput_ioctl+0x4a/0x60 [ 249.874034] do_vfs_ioctl+0x7ae/0x1060 [ 249.877942] ? selinux_file_mprotect+0x5d0/0x5d0 [ 249.882712] ? lock_downgrade+0x6e0/0x6e0 [ 249.886884] ? ioctl_preallocate+0x1c0/0x1c0 [ 249.891303] ? __fget+0x237/0x370 [ 249.894863] ? security_file_ioctl+0x89/0xb0 [ 249.899283] SyS_ioctl+0x8f/0xc0 [ 249.902656] ? do_vfs_ioctl+0x1060/0x1060 [ 249.906818] do_syscall_64+0x1e8/0x640 [ 249.910720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.915583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.920781] RIP: 0033:0x4598e9 [ 249.923969] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.931846] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 249.939127] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 249.946407] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 249.953686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 249.961099] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:18 executing program 1: [ 249.975864] input: syz1 as /devices/virtual/input/input989 22:41:18 executing program 3 (fault-call:8 fault-nth:16): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:18 executing program 1: [ 250.114313] input: syz1 as /devices/virtual/input/input990 [ 250.152185] input: syz1 as /devices/virtual/input/input991 22:41:18 executing program 1: 22:41:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xf61, 0x1000) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000140)}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) ptrace$cont(0x10, r3, 0x3, 0x9) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 250.241750] FAULT_INJECTION: forcing a failure. [ 250.241750] name failslab, interval 1, probability 0, space 0, times 0 [ 250.266509] CPU: 0 PID: 14654 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 250.273592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.282981] Call Trace: [ 250.285601] dump_stack+0x138/0x197 [ 250.289251] should_fail.cold+0x10f/0x159 [ 250.293419] should_failslab+0xdb/0x130 [ 250.297410] kmem_cache_alloc_node+0x287/0x780 [ 250.302012] __alloc_skb+0x9c/0x500 [ 250.305655] ? skb_scrub_packet+0x4b0/0x4b0 [ 250.310067] ? netlink_has_listeners+0x20a/0x330 [ 250.314832] kobject_uevent_env+0x781/0xc23 [ 250.319167] ? wait_for_completion+0x420/0x420 [ 250.323768] kobject_uevent+0x20/0x26 [ 250.327577] device_del+0x65c/0xaa0 [ 250.331215] ? __device_links_no_driver+0x220/0x220 [ 250.336265] ? mark_held_locks+0xb1/0x100 [ 250.340518] cdev_device_del+0x1a/0x70 [ 250.344421] evdev_disconnect+0x42/0xb0 [ 250.348400] __input_unregister_device+0x1eb/0x480 [ 250.353341] input_unregister_device+0xa9/0xf0 [ 250.357929] uinput_destroy_device+0x1ce/0x220 [ 250.362532] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 250.367743] ? uinput_request_submit.part.0+0x290/0x290 [ 250.373117] ? perf_trace_lock+0x109/0x500 [ 250.377469] ? check_preemption_disabled+0x3c/0x250 [ 250.382514] ? perf_trace_lock+0x109/0x500 [ 250.386767] ? __might_sleep+0x93/0xb0 [ 250.390753] ? __fget+0x210/0x370 [ 250.394214] ? uinput_compat_ioctl+0xa0/0xa0 [ 250.398624] uinput_ioctl+0x4a/0x60 [ 250.402431] do_vfs_ioctl+0x7ae/0x1060 [ 250.406326] ? selinux_file_mprotect+0x5d0/0x5d0 [ 250.411090] ? lock_downgrade+0x6e0/0x6e0 [ 250.415247] ? ioctl_preallocate+0x1c0/0x1c0 [ 250.419674] ? __fget+0x237/0x370 [ 250.423145] ? security_file_ioctl+0x89/0xb0 [ 250.427569] SyS_ioctl+0x8f/0xc0 [ 250.430958] ? do_vfs_ioctl+0x1060/0x1060 [ 250.435118] do_syscall_64+0x1e8/0x640 [ 250.439015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.443880] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.449076] RIP: 0033:0x4598e9 [ 250.452274] RSP: 002b:00007f8e11656c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.459994] RAX: ffffffffffffffda RBX: 00007f8e11656c90 RCX: 00000000004598e9 [ 250.467278] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 250.474562] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 250.481847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116576d4 [ 250.489133] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:19 executing program 1: 22:41:19 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x12, r0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000140)) creat(0x0, 0x4) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xffffff02) 22:41:19 executing program 3 (fault-call:8 fault-nth:17): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 250.741688] input: syz1 as /devices/virtual/input/input995 [ 250.794704] input: syz1 as /devices/virtual/input/input996 [ 250.817023] input: syz1 as /devices/virtual/input/input997 [ 250.833209] FAULT_INJECTION: forcing a failure. [ 250.833209] name failslab, interval 1, probability 0, space 0, times 0 [ 250.868894] CPU: 1 PID: 14679 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 250.875995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.885371] Call Trace: [ 250.887997] dump_stack+0x138/0x197 [ 250.891683] should_fail.cold+0x10f/0x159 [ 250.895870] should_failslab+0xdb/0x130 [ 250.899868] kmem_cache_alloc_node+0x287/0x780 [ 250.904481] __alloc_skb+0x9c/0x500 [ 250.908179] ? skb_scrub_packet+0x4b0/0x4b0 [ 250.912522] ? netlink_has_listeners+0x20a/0x330 [ 250.917335] kobject_uevent_env+0x781/0xc23 [ 250.921676] ? wait_for_completion+0x420/0x420 [ 250.926303] kobject_uevent+0x20/0x26 [ 250.930149] device_del+0x65c/0xaa0 [ 250.933805] ? __device_links_no_driver+0x220/0x220 [ 250.938841] ? mark_held_locks+0xb1/0x100 [ 250.943015] cdev_device_del+0x1a/0x70 [ 250.946921] evdev_disconnect+0x42/0xb0 [ 250.950925] __input_unregister_device+0x1eb/0x480 [ 250.955879] input_unregister_device+0xa9/0xf0 [ 250.960488] uinput_destroy_device+0x1ce/0x220 [ 250.965101] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 250.970319] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 250.975453] ? uinput_request_submit.part.0+0x290/0x290 [ 250.980924] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 250.986053] ? perf_trace_run_bpf_submit+0x113/0x170 [ 250.991307] ? __might_sleep+0x93/0xb0 [ 250.995212] ? __fget+0x210/0x370 [ 250.999151] ? uinput_compat_ioctl+0xa0/0xa0 [ 251.003583] uinput_ioctl+0x4a/0x60 [ 251.007328] do_vfs_ioctl+0x7ae/0x1060 [ 251.011246] ? selinux_file_mprotect+0x5d0/0x5d0 [ 251.016032] ? lock_downgrade+0x6e0/0x6e0 [ 251.020203] ? ioctl_preallocate+0x1c0/0x1c0 [ 251.024637] ? __fget+0x237/0x370 [ 251.028213] ? security_file_ioctl+0x89/0xb0 [ 251.032648] SyS_ioctl+0x8f/0xc0 [ 251.036038] ? do_vfs_ioctl+0x1060/0x1060 [ 251.040220] do_syscall_64+0x1e8/0x640 [ 251.044127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.049695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.054900] RIP: 0033:0x4598e9 [ 251.058098] RSP: 002b:00007f8e11677c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 22:41:19 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 251.065913] RAX: ffffffffffffffda RBX: 00007f8e11677c90 RCX: 00000000004598e9 [ 251.073325] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 [ 251.080608] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.088016] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e116786d4 [ 251.095322] R13: 00000000004c462f R14: 00000000004d89a0 R15: 0000000000000007 22:41:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x87c}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:20 executing program 3 (fault-call:8 fault-nth:19): socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:20 executing program 1: 22:41:20 executing program 1: [ 251.739466] input: syz1 as /devices/virtual/input/input1002 [ 251.766271] input: syz1 as /devices/virtual/input/input1003 [ 251.815414] input: syz1 as /devices/virtual/input/input1004 [ 251.841319] FAULT_INJECTION: forcing a failure. [ 251.841319] name failslab, interval 1, probability 0, space 0, times 0 [ 251.894770] CPU: 0 PID: 14719 Comm: syz-executor.3 Not tainted 4.14.142 #0 [ 251.901971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.911358] Call Trace: [ 251.913975] dump_stack+0x138/0x197 [ 251.917640] should_fail.cold+0x10f/0x159 [ 251.921829] should_failslab+0xdb/0x130 [ 251.925826] kmem_cache_alloc_trace+0x2e9/0x790 [ 251.930520] ? lock_downgrade+0x6e0/0x6e0 [ 251.934692] ? mutex_trylock+0x1c0/0x1c0 [ 251.938772] ? devm_device_remove_groups+0x50/0x50 [ 251.943722] kobject_uevent_env+0x378/0xc23 [ 251.948059] ? wait_for_completion+0x420/0x420 [ 251.952680] kobject_uevent+0x20/0x26 [ 251.956705] device_del+0x65c/0xaa0 [ 251.960361] ? __device_links_no_driver+0x220/0x220 [ 251.965408] __input_unregister_device+0x381/0x480 [ 251.970367] input_unregister_device+0xa9/0xf0 [ 251.974967] uinput_destroy_device+0x1ce/0x220 [ 251.979579] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 251.984802] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 251.989934] ? uinput_request_submit.part.0+0x290/0x290 [ 251.995321] ? perf_trace_run_bpf_submit+0x10a/0x170 [ 252.000619] ? perf_trace_run_bpf_submit+0x113/0x170 [ 252.005769] ? __might_sleep+0x93/0xb0 [ 252.009686] ? __fget+0x210/0x370 [ 252.013191] ? uinput_compat_ioctl+0xa0/0xa0 [ 252.017619] uinput_ioctl+0x4a/0x60 [ 252.021277] do_vfs_ioctl+0x7ae/0x1060 [ 252.025185] ? selinux_file_mprotect+0x5d0/0x5d0 [ 252.030313] ? lock_downgrade+0x6e0/0x6e0 [ 252.034487] ? ioctl_preallocate+0x1c0/0x1c0 [ 252.038968] ? __fget+0x237/0x370 [ 252.042453] ? security_file_ioctl+0x89/0xb0 [ 252.046895] SyS_ioctl+0x8f/0xc0 [ 252.050318] ? do_vfs_ioctl+0x1060/0x1060 [ 252.054502] do_syscall_64+0x1e8/0x640 [ 252.058416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.063295] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.063307] RIP: 0033:0x4598e9 [ 252.071678] RSP: 002b:00007f8e11677c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.079407] RAX: ffffffffffffffda RBX: 00007f8e11677c90 RCX: 00000000004598e9 [ 252.079416] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000006 22:41:20 executing program 1: 22:41:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 252.181856] input: syz1 as /devices/virtual/input/input1006 22:41:20 executing program 1: [ 252.267062] input: syz1 as /devices/virtual/input/input1007 22:41:21 executing program 1: 22:41:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x7fffffff}, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:21 executing program 1: [ 252.422866] input: syz1 as /devices/virtual/input/input1009 [ 252.489755] input: syz1 as /devices/virtual/input/input1010 22:41:21 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:21 executing program 1: 22:41:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x101}, &(0x7f0000000180)=0x8) syz_open_dev$evdev(0x0, 0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf, 0x14d2]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:21 executing program 1: [ 252.778255] input: syz1 as /devices/virtual/input/input1012 [ 252.834113] input: syz1 as /devices/virtual/input/input1013 22:41:21 executing program 1: 22:41:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffffc, 0x2, 0x5, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x498ac064, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80800) write$binfmt_elf32(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x1178) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37f2653c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\xf4\xf0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000200)=""/250, 0xffffff02) 22:41:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) mq_notify(r0, &(0x7f0000000140)={0x0, 0xf, 0x1, @tid=r1}) [ 253.480979] input: syz1 as /devices/virtual/input/input1025 [ 253.544010] input: syz1 as /devices/virtual/input/input1027 [ 253.559764] input: syz1 as /devices/virtual/input/input1028 22:41:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) fdatasync(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x800840) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, @default, @rose={'rose', 0x0}, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 22:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 253.883668] input: syz1 as /devices/virtual/input/input1033 [ 253.909066] input: syz1 as /devices/virtual/input/input1034 [ 253.962745] input: syz1 as /devices/virtual/input/input1035 22:41:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x101800) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000100)={0x1ff, 0xffff, 0x7f, 0xff, 0x2, 0x81}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 254.075749] input: syz1 as /devices/virtual/input/input1036 [ 254.136323] input: syz1 as /devices/virtual/input/input1038 [ 254.174476] input: syz1 as /devices/virtual/input/input1039 22:41:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000001500)=""/187, 0xfffffffffffffdda}, {&(0x7f0000000340)=""/4096, 0x18e}, {&(0x7f0000000040)=""/62, 0xffffffffffffff77}, {&(0x7f00000015c0)=""/86, 0x56}, {&(0x7f0000001640)=""/179, 0xb3}], 0x83e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 254.225058] input: syz1 as /devices/virtual/input/input1040 22:41:22 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 22:41:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 254.352080] input: syz1 as /devices/virtual/input/input1041 22:41:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x1c, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x6}, [@typed={0x8, 0x3, @u32=0x8}]}, 0x1c}}, 0x0) [ 254.429778] input: syz1 as /devices/virtual/input/input1043 [ 254.448557] input: syz1 as /devices/virtual/input/input1044 22:41:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'cri$ge_smave_0\x00', r1}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 22:41:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 254.592381] input: syz1 as /devices/virtual/input/input1045 [ 254.633404] input: syz1 as /devices/virtual/input/input1046 22:41:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x1, 0x400, 0x6, 0x8}) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/de\a/inp\x98t/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) r2 = dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) 22:41:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 255.013632] input: syz1 as /devices/virtual/input/input1054 [ 255.021858] input: syz1 as /devices/virtual/input/input1055 [ 255.146342] input: syz1 as /devices/virtual/input/input1057 22:41:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x8002, 0x0, 0x0, 0xc, 0x0, 0x0, 0xc87}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) munlockall() syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/17, 0x11) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, @in6={{0xa, 0x4e21, 0xfffffffffffffff7, @rand_addr="6ee7d6fcd3f08bb15e4d35759cd54a0b", 0x8}}, [0x2, 0x3ff, 0x1, 0x100000001, 0x4, 0x1a3, 0x200, 0x2, 0x1, 0x80, 0x1e, 0x4, 0x4b, 0x1, 0xa440000000000000]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r5, 0x28000000}, &(0x7f00000002c0)=0x8) 22:41:23 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0xc0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/avc/5achehreshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4094) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x16e1391d20dcb940}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x310000) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 255.546553] input: syz1 as /devices/virtual/input/input1069 [ 255.554089] input: syz1 as /devices/virtual/input/input1070 22:41:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) ioctl$UI_DEV_CREATE(r1, 0x5501) 22:41:24 executing program 1 (fault-call:9 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 255.662537] input: syz1 as /devices/virtual/input/input1073 [ 255.778393] input: syz1 as /devices/virtual/input/input1076 [ 255.786317] input: syz1 as /devices/virtual/input/input1075 [ 255.803036] input: syz1 as /devices/virtual/input/input1077 22:41:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) [ 255.872996] input: syz1 as /devices/virtual/input/input1078 22:41:24 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:24 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87r0}) getsockopt$inet_int(r0, 0x0, 0x9f4472d3bec7552, &(0x7f00000009c0), &(0x7f00000000c0)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.236418] input: syz1 as /devices/virtual/input/input1088 22:41:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x20c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup2(r2, r3) dup(r3) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) dup2(r5, r6) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) dup2(r4, r7) write$binfmt_script(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c65302073656375726974792e696d61002073656375726974792e696d6100202f64657602000000002f3030232f303023000a60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"], 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 256.311099] input: syz1 as /devices/virtual/input/input1089 22:41:25 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x28100, 0x0) sendto$packet(r0, &(0x7f0000000100)="2783017eed691a2878d340299222ca66187526e706afa4f4b2ce0fee7d98439657f762b11d6d", 0x26, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x1, @perf_bp={0x0}, 0x10050, 0x0, 0x0, 0x0, 0x71d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x84) tkill(r1, 0x400000036) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x6, 0x80, 0x101, 0x3ff, 0x0, 0x1, 0xb1a773bfe385986a, 0x0, 0xffff, 0x1000, 0x100000001, 0x1ff, 0xd0, 0x0, 0x100000000, 0x48cd, 0x7fffffff, 0x2, 0x5, 0x800, 0x4, 0x0, 0x9, 0x7fffffff, 0x2, 0x3, 0x5, 0x0, 0x2, 0x10001, 0x100000000, 0x20, 0x6, 0x0, 0xfaa, 0x3, 0x0, 0x6, 0x6, @perf_config_ext={0x401, 0x20}, 0x20, 0x200, 0x3ae3d698, 0x9, 0x5, 0x0, 0x3}, r1, 0x8, r0, 0x3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x40000}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x400000036) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x8080, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x7, 0x1beb, 0x3, 0x8, 0x0, 0x5, 0xd3b20, 0x1, 0x2, 0xba9, 0xcf, 0x4, 0x7fff, 0x0, 0xee, 0x4, 0x7ff, 0x6, 0x0, 0x9, 0x6, 0x0, 0x7, 0x6, 0x400, 0x2, 0x3, 0x1, 0x2, 0x5, 0xffff, 0x401, 0xa3, 0x7bb, 0x4, 0x1, 0x0, 0x3, 0x660d269e758dab63, @perf_config_ext={0x8, 0xe5}, 0x1000, 0x5, 0x6, 0x3, 0xffffffff, 0x7, 0x1}, r7, 0x2, r8, 0x10) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x200000000491, 0x40002) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.478164] input: syz1 as /devices/virtual/input/input1091 22:41:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x474140) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 256.523620] input: syz1 as /devices/virtual/input/input1092 22:41:25 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x9, 0xa, 0x9, 0x5b7e, "0be19734967eab94b8fce798e72b6f0afb902a1b3f9ab3ee359915b10c5f6db7"}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 256.766059] input: syz1 as /devices/virtual/input/input1097 22:41:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x200000000}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) dup2(r4, r5) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c65302073656375726974792e696d61002073656375726974792e696d6100202f64657602000000000000002f3030232f303023000a60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff89f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54674013948b066928f6b2731470d7d6b3017c84854747297ba6639119c90f190d87c2ac10a697ea4cb110acd152600aa73ffecc68f52618687b80ccc18739344aca93e861dfe9fdf2df3825006e6a0ed4dc81a5d46bdebdf2b505ae4d9402fd9d8aba8d0fd1cf865ebbc3c1d17b9b79eb0db245c9e0786fe6d6aefdccc04cdaa78314498c9d66713767b313d65be1733f5f7dacfd05aff399a2c08d4065dd8e080410f5096564ba324200"], 0xaa) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) r9 = getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r11, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r11, 0x5502) dup2(r11, r12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000440)={0x3ec, 0x20, 0x0, 0x70bd2d, 0x25dfdbfd, {0x11}, [@generic="f5ea18d9", @nested={0x164, 0x52, [@generic="d9b170da720c4f7070958f061ea69e205363b90b583068698c0baf51c707a08b4fcbede43e97f03a825214ef0d110d7bdeab8458ffe702966387894cb40bccfc507f5ad6e787553c6acbaf5592e7258424917f942c82e5634dca1b74cb2e94fb094383d2f59a284a3cfa7f0e0bdddd946b18b99b642d3beb979537f86ea9d224", @typed={0x8, 0x41, @uid=r7}, @generic="8a1eef59142330dc5a7c10692388eb9247784a7bece8427e1b5a60ef42329d1cf48fae49a120cf1f81840e38aa95293c35a265dc3057462c1249ac79b549f2d0617d9c4fe5b95ad7e7429e352ea71e78fea9bc84691ed10bf7cf2fe1605b68538da00318a37e31130b550dbe9b55c23d9e59c692897805718acfdbf36609ecbf0ccad708b89284d4f5b8b64fcce467fca4784d0f4bc03e21f391e7fc3fc743b0ca2192ba24a2a82125c1f643cc582c6264cfc50e513516", @typed={0xc, 0x8e, @u64=0x4}, @typed={0x14, 0x23, @ipv6=@mcast1}]}, @typed={0x8, 0x1c, @pid=r8}, @generic="689180ace75343d2b237fc5b583170d53b7907e0d910053c41b8db34be65881f05ed9677a1dcc45d6f6478587d61d7a5e2f82d52", @nested={0x234, 0x20, [@generic="ddad492f1587071c71eee05d5bea0a758944317a1d22436aab3068be8abd5cf0485936fd7db8698b1e", @typed={0x8, 0xe, @pid=r9}, @generic="6ee9e4acca4f8bf0a5a0e1abba92351ab684c42768fe2155b5152efd3ab1a40e5fb04bafba3b564b30fc4d32645616ba6e9a8f1501b94b25e350d9dbf4ed61f94b340c916a5cb7a0ab7d57d194ffc8492f5d433d1512d194fed98d93c0b8bf4409af4ce1a1617d11d5aa0ab8deb19c1fc4eac6e92c2e3d4eac380a678fdc890754f6178131dca1e77434728f8e1bab64456d96bc95b63d8ca14870e68d8e88fd9b54d9c22d312266fd2faa1a00721e52ce551075068b1a3cc7feee28eabbb2a2c44d2a5905202783add5b44bc4c619d5867e8f260cefd3ef068450295f0fa6fd6db611ad98dbcc54c0489ada2446983fbc", @generic="8b6421153c6e1d82b5c21612477e5c9b5b04a0c6dbf82351eec34d814ccfd926df686c808054e982cb89b1b69ec4bc6ebd923a56f81af25f5481deb7570c2a00f8ad0bb8c9cc4b32ebbe2dfefd0dcfbdbc1f314ace9fd442fac6f959c87a166decd2af4540ae96fb50c512d49f3d1bde92d84f6fedc56b170bc6294a14e4a2b3eb8e2089dcacb2c24a638692d87b3993cd942be2c6fa485527cdfd7d983cf25648748c6b0806ee9631373cd0263cb16315c118a15b6657c21ca35e2125d6d0f37b537b2b8b41b015c545e516a4a4822f327d7dfb40bcde4ae9bc66b0192f712feaa6f15f514b896c7f2c57", @typed={0x8, 0x52, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @typed={0x8, 0x55, @fd=r5}, @typed={0x8, 0x36, @uid=r10}, @typed={0x8, 0x6b, @fd=r11}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40}, 0x8094) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x7, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 257.084438] input: syz1 as /devices/virtual/input/input1098 [ 257.098917] input: syz1 as /devices/virtual/input/input1099 [ 257.111496] input: syz1 as /devices/virtual/input/input1100 [ 257.140711] input: syz1 as /devices/virtual/input/input1101 [ 257.206791] input: syz1 as /devices/virtual/input/input1102 22:41:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 257.261373] input: syz1 as /devices/virtual/input/input1103 22:41:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bcsf0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000845780290629147b8fa2dc3af0aa4263472eabae4b7c919dcdc0e107f4a636fadc68e3f1b318d6141ea6ae811f7babd68adf374dfe2c50b45e523d80a2194946d48c847745aabb609c917db40000000041c2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000140)={r7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000002c0)=r7, 0x4) syz_open_dev$evdev(0x0, 0x4, 0x511042) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:26 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x295a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/172) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) read(r1, &(0x7f0000000140)=""/4096, 0x1000) 22:41:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) io_submit(r6, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r3, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r3}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r2}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r5, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r2}]) name_to_handle_at(r3, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r7}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', r7}) r8 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r8, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r9, 0x5502) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x200040, 0x0) r11 = dup2(r9, r10) write$binfmt_script(r9, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) r13 = socket$inet6(0xa, 0x400000000001, 0x0) close(r13) r14 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r13, r14, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f0000000140)={r15}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000340)={r15, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) [ 257.466178] input: syz1 as /devices/virtual/input/input1107 22:41:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 257.523897] input: syz1 as /devices/virtual/input/input1108 [ 257.539838] input: syz1 as /devices/virtual/input/input1109 [ 257.595317] input: syz1 as /devices/virtual/input/input1110 22:41:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) 22:41:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78, 0xfce}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = semget$private(0x0, 0x1, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e22, 0xfffffffffffffffc, @mcast1, 0x7f}}, 0x8, 0x20}, &(0x7f00000001c0)=0x90) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext={0xfa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 257.844955] input: syz1 as /devices/virtual/input/input1116 [ 257.888630] input: syz1 as /devices/virtual/input/input1117 22:41:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1d0ff5ebc6aa2508, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, @multicast1, @dev}, &(0x7f00000004c0)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0xf5, r6, 0x1, 0x8001, 0x6, @remote}, 0x14) preadv(r4, &(0x7f00000017c0), 0x199, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000240)=0x7, 0x4) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000340)={0x3, 0x3, 0x0, [{0x0, 0x9, 0x6, 0x9, 0x9, 0x1}, {0x5, 0x4, 0x6, 0x1, 0x5, 0x7ed, 0xffffffff}, {0x7, 0x4, 0x8000, 0x8, 0x3000000000000000, 0x3, 0x800}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 257.998697] input: syz1 as /devices/virtual/input/input1118 [ 258.030006] input: syz1 as /devices/virtual/input/input1119 22:41:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x604000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={r4, 0x3, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r4, 0x7f}, 0x8) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:26 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) socket$inet6(0xa, 0x1, 0xfb) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:26 executing program 5: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000000c0)={0x7, 0x1c, [0x3, 0x7, 0xffffffffffffffe0, 0x1, 0x8000, 0x1, 0x4]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x9ce401bd7b5fd0b8, 0xffffffffffffffff) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x5, 0x5, 0x3, 0x1, 0x4}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 258.229777] input: syz1 as /devices/virtual/input/input1120 [ 258.259098] input: syz1 as /devices/virtual/input/input1121 [ 258.292968] input: syz1 as /devices/virtual/input/input1122 [ 258.346670] input: syz1 as /devices/virtual/input/input1123 22:41:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) io_submit(r7, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r4, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r4}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r3}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r6, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r3}]) name_to_handle_at(r4, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r8}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'irlan0\x00', r8}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 258.391916] input: syz1 as /devices/virtual/input/input1124 22:41:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0xc0420, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000100)={0x3f, 0x2, [0x1f, 0x7fffffff, 0x67, 0x5, 0x9], 0x31}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) dup2(r8, r9) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x0) [ 258.593164] input: syz1 as /devices/virtual/input/input1125 22:41:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000036) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x6f3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xc, 0x2, 0x3}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x10000}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)=r4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x18, &(0x7f0000000100)='posix_acl_accesswlan1@}\x00', r4}, 0x30) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) [ 258.729811] input: syz1 as /devices/virtual/input/input1128 [ 258.742836] input: syz1 as /devices/virtual/input/input1129 22:41:27 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x101, 0x7, 0x1}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 258.827411] input: syz1 as /devices/virtual/input/input1132 [ 258.843658] input: syz1 as /devices/virtual/input/input1133 [ 258.881476] input: syz1 as /devices/virtual/input/input1134 [ 258.892555] input: syz1 as /devices/virtual/input/input1135 22:41:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='\x1dde\x860\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 258.938734] input: syz1 as /devices/virtual/input/input1136 22:41:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0x0, 0x3}, 0x18) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 259.082438] input: syz1 as /devices/virtual/input/input1138 [ 259.152010] input: syz1 as /devices/virtual/input/input1139 22:41:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x5, 0xa7f, 0xfffffffffffffffb, 0xe}, 'syz1\x00', 0x40}) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="b639da099ee66568b7c4b3ab2922d1ce6f3aaad18e29f756af3827dc4732cb1022e27958401c6b9fc73a6cdb550500000000000000d0dca7d2b4e6edd22a45d84a5266e149eb2f2f97747ec6e0cd52ad043b2db0"], 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c65302073656375726974792e696d61002073656375726974792e696d6100202f64657602000000000000002f3030232f303023000a60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588740c17f4aedd9e5a5b0b17f1f5400"/170], 0xaa) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x31424752}}) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 259.214778] input: syz1 as /devices/virtual/input/input1140 22:41:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup2(r6, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:27 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87e\x16\x99\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) [ 259.505996] input: syz1 as /devices/virtual/input/input1145 22:41:28 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 259.793548] input: syz1 as /devices/virtual/input/input1148 22:41:28 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) signalfd(r0, &(0x7f0000000000)={0x9}, 0x8) 22:41:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffe21, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xb, 0x200300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="c52f000000000000002c06000000259e011a"], 0x18}}, 0x0) lseek(r0, 0x0, 0x6) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x1d8, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc151701}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff81}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x576e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4008800}, 0xc000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) [ 259.899389] input: syz1 as /devices/virtual/input/input1150 22:41:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r9, 0x0) r10 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r13, 0x0) mount$fuseblk(&(0x7f0000000440)='/dev/loop0\x00', &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='fuseblk\x00', 0x180000, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c66736d616769633d3078303030303030303030003030303030372c6f626a5f757365723d73656375726974792e696d61002c7375626a5f757365723d295e2c646f6e745f686173682c66736e616d653dc02c666f776e65723d413ac10921f43279e35a084acf88b6461d98233e82b8a0849002851560bc071d49a841be31959bfaf9e30043cb3f3277d1cb2def62e63e1c57af78c2552026df1ad6999c5b41868e0ce399731e4cce0c0b028239ccc5c7ceedfe24523906bba97e045d99ab4329ed94a4f13d70a01e9e4834", @ANYRESDEC=r11, @ANYBLOB="ca1700000000", @ANYRESDEC=r13, @ANYBLOB=',\x00']) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 260.396579] input: syz1 as /devices/virtual/input/input1160 22:41:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 260.654998] input: syz1 as /devices/virtual/input/input1163 [ 260.734016] input: syz1 as /devices/virtual/input/input1164 22:41:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x2338, 0x80000001, 0xffffffffffffdf44, 0x2, 0xff, 0x80, 0x800, 0x7, 0x7, 0x80, 0x3}, 0xb) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$uinput_user_dev(r2, &(0x7f0000000340)={'syz1\x00', {0x6, 0x0, 0x1, 0x52}, 0x54, [0x1ff, 0x2, 0x20, 0xfffffffffffffffa, 0x1, 0xffffffffffffffc0, 0x9, 0xfffffffffffffffe, 0x9, 0x1, 0x8000000000, 0xfffffffffffffd83, 0x800, 0x1, 0x6, 0x8, 0x8001, 0x114, 0x100000000, 0x2, 0x4, 0x7fffffff, 0xbbd, 0xfffffffffffffffa, 0x0, 0x5b, 0x3f, 0x4d05, 0x7f, 0x1, 0x21, 0x67ebd46, 0x2393, 0xffffffffffffff81, 0x67de, 0xff, 0x5, 0x6, 0x400, 0x20, 0x6, 0x3, 0x3, 0x6, 0xa71, 0x3, 0x8, 0xfff, 0xffffffffffff0000, 0x8001, 0x100000000, 0x4, 0x4a, 0xff, 0xa814, 0x7, 0x80000000, 0xc6fe, 0x20, 0x9, 0x10001, 0x3f, 0x1], [0x4, 0x5, 0x1, 0xa711, 0xffffffffffffff05, 0x9, 0x5, 0x8001, 0x8, 0x4, 0x1, 0xfffffffffffffffe, 0x9, 0x3, 0x3, 0x100, 0x9, 0x1000, 0xfff, 0x100000001, 0x6, 0x4, 0x4, 0x7, 0x80000000, 0xffffffff00000001, 0x5, 0x5000000000000, 0xd63, 0x996, 0x6, 0x3, 0x3, 0x400, 0xb8f, 0x3e8a, 0x8000, 0xffffffffffffff01, 0x2, 0xffffffffffffffff, 0x7, 0x4, 0x0, 0xffffffff7fffffff, 0xf7, 0x7, 0x6, 0x100000001, 0xf9, 0x4, 0x7, 0x9, 0xffffffffffffffff, 0x3f, 0x1, 0x78c1e03c, 0x1e1d, 0x7a2cba1d, 0x101, 0x401, 0x8000, 0x80000001, 0x3, 0x5], [0x1000000020000, 0x5, 0x0, 0x44, 0x3ff, 0x7, 0x6, 0x39a, 0x1, 0x8000, 0x100, 0x1000, 0x0, 0x2, 0x80000000, 0x8001, 0x8, 0xfffffffffffff4d2, 0x9, 0x7fffffff, 0xffffffff, 0x7, 0x9, 0x0, 0xa00, 0x1, 0x2, 0x101, 0x8, 0x2a8cb1ad, 0x4, 0x0, 0x3, 0x2, 0x101, 0x1, 0x5, 0x8, 0xfff, 0xffffffffffffffff, 0x20, 0x7, 0x7, 0x81, 0x7f, 0x15, 0x8, 0x401, 0x4, 0x3, 0x5, 0x5, 0xf9, 0x6, 0xf847, 0x2, 0x0, 0x3f, 0x1, 0xac, 0x1, 0x80000001, 0x9, 0x8], [0x100000001, 0x6, 0x4000000005, 0x9, 0x9b, 0xfffffffffffffffb, 0x8000, 0x9, 0x0, 0x80, 0x804, 0x81, 0x9, 0x9, 0xffffffff, 0x7ff, 0x6, 0x7, 0x8001, 0x9, 0x8, 0x51, 0x3, 0x100, 0x6e31, 0x7fffffff, 0x38000, 0x0, 0x4, 0xfff, 0x8, 0xeb, 0x6, 0x1, 0x6, 0x4, 0x4, 0xdf, 0x8a65, 0x5c, 0xb88, 0x5, 0x10001, 0xc0, 0x6, 0xfff, 0x2, 0x1, 0x0, 0x5, 0x1, 0x0, 0x2, 0x1, 0x6, 0x6a98, 0x7, 0x5, 0x0, 0x100, 0x10000, 0xfffffffffffff9a4, 0x8, 0x4f0]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 260.962786] input: syz1 as /devices/virtual/input/input1166 22:41:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x400, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000380)=""/79) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r4) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 261.094587] input: syz1 as /devices/virtual/input/input1167 [ 261.104569] input: syz1 as /devices/virtual/input/input1168 22:41:29 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:29 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80, 0x42001) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x5de, 0x1, 0x3006, 0xb4f097da68076fba, 0x14, 0x1, 0x1, 0x5}}) 22:41:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 261.218073] input: syz1 as /devices/virtual/input/input1169 [ 261.317655] input: syz1 as /devices/virtual/input/input1173 [ 261.326426] input: syz1 as /devices/virtual/input/input1172 22:41:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0xeb9d9a3ed2cb9e1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x3a, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x0, 0x4000000000001, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 261.471224] input: syz1 as /devices/virtual/input/input1182 22:41:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x35, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) io_submit(r5, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r2, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r2}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r1}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r4, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r1}]) name_to_handle_at(r2, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r6}, 0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @local, @empty, 0x7, 0x20, 0xffffffffffff0001, 0x400, 0x8, 0x40000, r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) [ 261.647987] input: syz1 as /devices/virtual/input/input1185 22:41:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fae4481b800008ec866660f7d2bb807008ee8b800088ed80fc779710f01cb363e66c1a43f6b00660f3882852e5a36670f01d1", 0x33}], 0x1, 0x110, 0x0, 0xfffffffffffffd06) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 261.768208] input: syz1 as /devices/virtual/input/input1188 22:41:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:30 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000001440)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000000000)="89bcea2049607d38fce27934397129cd2d2d917b5bc9d2fff09c352603a53c887e5f8cda5147fafa4602f139cf3b0c5cff3540c65a05aa84", 0x38}, {&(0x7f0000001080)="56fabc5b39e248706e5a139c8215c9f8fc6bf6835b1d9d7a6d3b58ba44b9b452", 0x20}, {&(0x7f00000010c0)="d8497fea3a0e630e0bfec133dc4ddc970281cd635a13215a3b642c69482053777080451ba588822f6cf96241e71c511118518fddce159428ff7f73a8c7f4adf7af2f0c3ec951ae2f4ad3c6c62629d63290910d873dc7c41092c3142aecdf54e3889c2e039a11e5c7634181978a18fade14b8c1dc8a8104c7a043bbed9b1702fff8b421f37b4236e342569607db98153dcfd37808e557b9ff2a27e1d41756affd923f1c50449caffe99f83569ddfb439bca92089609", 0xb5}, {&(0x7f0000001180)="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", 0xfa}, {&(0x7f0000001280)="b8da3c39d47ac24ab0a23d0715f09b4c156eef986e451ae65f5b4c12afa383c077c2db0c85e28295b158616140fd2eb06f94c91888115e9762af396ee3e0504543a6e8fe8cba36f0c6f1edd14f796f29e91c4fa5d921bf55292edb80f4cf2d62355e8963b6e5f14120a2d0e800d4c8c80d95", 0x72}, {&(0x7f0000001300)="76b4f8a57eb3cafaa55e2cfb0cfef7bc041ecd204221cc3144f946b6cbe82d1ef94b146e9f177c68e3", 0x29}, {&(0x7f0000001340)="b1d661189e3fb4e8b44f4e3e8f3ac185d4c1b18bc017e7bb795933320cde819b4a3e9634226fe987e2d423b74ab59c1baef693b898d5f1807af578716b697eae5f026e78391909896661ab39983a5555ab67958f4204d4c34dc00b8fabfeb347e96e626cf0a6c9a0454fe22784a59058803d7eba6b04db448eb7f5c9f27a1c51dc0e3353", 0x84}, {&(0x7f0000001400)="e85f530033a21ec6f65a0531a28dbd1babef2735da49e285696ebef0f95d29b4476042798a3324ecf44240e033f6973134", 0x31}], 0x9, 0x5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002a40)='/dev/btrfs-control\x00', 0x101004, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000002a80)={0x2, 0x439, 0x6, 0x3, 0x950846f, 0x401}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001500)='/dev/sequencer2\x00', 0xd3f68c70c25daf2d, 0x0) vmsplice(r2, &(0x7f00000029c0)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="6b3e41a91819096bb064b7d174b8d7c6fc16514b35a7db8219197d26c5eb9bda89a812339e9cc678dc3da96028392cc4103c851e1e896b1caaaf9040d16b82db9b46b2d028b4fb473fa62a166897c98d68adb793fa20398d22f436523b7be3895f88c389a1037b7f7e3f7c412c642d0395b261a0771c57933870335ed44efcbfae4c94142e3bcd48b4178ed8844bfafb2aac8041bed2b5a5a1d768502b2a2fedf8e2664111f10adc1bd295d99062afd8f4b9028a18ad5c77332091576e97f13128", 0xc1}, {&(0x7f0000002640)="5842b30f32e8950778379e8ee619ce63f992be4db35058e84cbca0807ca9f33ecc1fd3b3edecb541a7d28b74825c20a0bf23d0f5f07584d2936e0274e779c98dce14d2ca54f7a5ae86c5c05fcbe641e8dc52b5fee85f11c72f2bf81a723281009271e8879620b0059d6b7dc7bbb735a63fb3c30800d2206d04af830e8bee64f3f71dab1f4dfe20ce848a52", 0x8b}, {&(0x7f0000002700)="4a8ba7969b58db220e73df11c28608f55575a1234d8ccd7975523177c659bcf7f3dfcc73d61cd3d4c9acdef1ce95182c32efadf392a1eae3f5d8dc81d7029dd785491887d386fbcc7cc5e518cd84a22ad5be30f4b40e129f10e3946fd5aa2cdbce75dbe1930e4b010b5053bf2e8cde966c8a82245462c1451c089404a202cf00db49b1d795bf46f776f1f5f98cea8e2e6448cfc9700cbf103cb49ac55aef931ff47ad7baa285f65b97c6cf22f1f1aa0d6bd5b233f6f40191d21933", 0xbb}, {&(0x7f00000027c0)="ccf98824a0f8310c29683488c9016c4640", 0x11}, {&(0x7f0000002800)="c81ac2b9875ea273ddfe7f983068154cac7f21421b782fc59d7f8ece36a9ef9ff3a335b32f7f4a656c47066a4137d625354c14a6cbb93e521dc74cbedadd6462a5b1024cbc92f4822bb7d7be9c5a418a1d7ca566a54b9f3a3dcc524f02ce2b917b93ebb35a7d35f1e50bb6ded29d4a517819103d507a24c6435f5c724850a8adfe14ce122d26e3e55daea636325abecfdf6a81d60249f14c5f78f93533ef646f795660114ec84338b480c2c43f4037e3a7d9b78dd3f5a4f0", 0xb8}, {&(0x7f00000028c0)="504f641409857f1f49d7d4d0fb3df0f4b6960e6f221a856f12e4276168dfcab252d2f961056be297bd588b3527287efbe6abad9783830faa291593e840b124382c5d3484e167540864f5be70adbf679053600f024a4a87677609df46ee2f7d7efb4224a7e26c7f320f2fd1bad69728f4112a574aafc2c4982628b452ddd46ebbede40bc4a5390716699e7068c517dd2617a51cc540b55bafeaabcd5923ae24d249f11e5bd4fc05043b8756513da5bb930d0738746a453e9bec867aeb39a0691942cd36", 0xc3}], 0x7, 0x1) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 261.895661] input: syz1 as /devices/virtual/input/input1191 [ 261.943054] input: syz1 as /devices/virtual/input/input1193 22:41:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x17, 0x9, 0x1}, {{0x0, 0x2710}, 0x0, 0x2}], 0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 262.073526] input: syz1 as /devices/virtual/input/input1194 22:41:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x401, 0x8, 0x0, 0x8000000000000}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00', 0x4e}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 22:41:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000240)={0x0, 0x9, 0x2021}) 22:41:30 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000080)="81722d926127d5ae2d9058061b16539ab5140a7497e16bcda017cf9481b1f40bf6d8b474df2da06f3ce6fff1e2bf64db88e6560bda7d17371aa7d7726c6f319c7c455327072d397e36b8fc144e5b6bb065a64c521e82c458d214bb9327864693e1b48a6d121b369e7f9c0e05296ac69789f989199e1e952dfce2b8b89ab8fbce85e4d87f87e76c2f659d6b1440d1d2f931c7842367b6f6d48e5a781436494e4137212ebc03b2076b07541e4820b4b61beebc3489cab7f7d7680e7bf2cb6cd0e05780a7d45b79a45bc68d82cb0517", 0xce, 0x880, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @local, 0x17f3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 262.424642] input: syz1 as /devices/virtual/input/input1200 [ 262.465855] input: syz1 as /devices/virtual/input/input1201 22:41:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) r23 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1}) syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:31 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="58f91da7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x80000000000, 0x4a9b}, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 262.715337] input: syz1 as /devices/virtual/input/input1203 [ 262.742922] input: syz1 as /devices/virtual/input/input1204 [ 262.765548] input: syz1 as /devices/virtual/input/input1205 [ 262.867467] input: syz1 as /devices/virtual/input/input1207 [ 262.913101] input: syz1 as /devices/virtual/input/input1208 22:41:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000380)={0x1, 0x800000000, 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000003c0)={0x0, 0xf0e4, 0x2}) dup2(r2, r3) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:31 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7c3, 0x934ccfc43490806c) [ 262.999185] input: syz1 as /devices/virtual/input/input1210 [ 263.022125] input: syz1 as /devices/virtual/input/input1211 [ 263.109876] input: syz1 as /devices/virtual/input/input1212 [ 263.145265] input: syz1 as /devices/virtual/input/input1215 [ 263.170665] input: syz1 as /devices/virtual/input/input1216 22:41:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) gettid() 22:41:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 263.227085] input: syz1 as /devices/virtual/input/input1217 [ 263.288714] input: syz1 as /devices/virtual/input/input1218 [ 263.344924] input: syz1 as /devices/virtual/input/input1219 [ 263.363031] input: syz1 as /devices/virtual/input/input1221 22:41:32 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x400000036) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x4, 0x400000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000680)=@v1={0x1000000, [{0x3f, 0x4}]}, 0xc, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000b00)={0x4a, @tick=0x5, 0x0, {0x4}, 0x6, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r5, 0xa4, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0xfffffffffffffc01}, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x9}, @in6={0xa, 0x4e22, 0x1, @rand_addr="765553569a55f9c8d86255bf48b9839f", 0x8}, @in6={0xa, 0x4e24, 0x200800000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000003c0)=0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:32 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xd7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x200000000000000}, r2, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000180)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x2}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000007c0)={r5, 0x2, 0x9, [0x80, 0x0, 0x100000000, 0x4, 0x9, 0x3f, 0x400, 0x3ff, 0x2]}, 0x1a) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x18000000000, 0x24002) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x0, 0xfe8}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f0000000700)={r8, 0x800}) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r6) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 263.847438] input: syz1 as /devices/virtual/input/input1230 [ 263.878225] input: syz1 as /devices/virtual/input/input1231 [ 263.888374] input: syz1 as /devices/virtual/input/input1232 [ 263.917889] input: syz1 as /devices/virtual/input/input1233 [ 263.963154] input: syz1 as /devices/virtual/input/input1235 22:41:32 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:32 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x490400, 0x0) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:41:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000340)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00@\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fstat(r7, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) write$FUSE_GETXATTR(r1, &(0x7f0000000500)={0x18, 0x0, 0x1, {0x5}}, 0x18) fchownat(r2, &(0x7f00000004c0)='./file0\x00', r6, r8, 0x1000) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000340)=""/16) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000140)={0x5, 0x100, 0x4, {0x1, 0x5, 0x2, 0x4bce}}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r9, 0xc008551a, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000000000e9ec5e8b6566197609ab69d109d8c4bc570a98c8f344874823ba0042af7a3a94985fffaedc93e0304886374f6bd235a54b7ad01d5e4462b7b5fd82f84482a9a8f56dcd16840be5f02ce99cbe8834b7e23d45a2024173fec2878444d79d6d89b81dd36839"]) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 264.199086] input: syz1 as /devices/virtual/input/input1242 [ 264.205922] input: syz1 as /devices/virtual/input/input1243 22:41:32 executing program 2: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x1000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r2, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r5, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r2, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r2}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r1}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r4, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r1}]) name_to_handle_at(r2, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r6}, 0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @local, @empty, 0x7, 0x20, 0xffffffffffff0001, 0x400, 0x8, 0x40000, r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) [ 264.263363] input: syz1 as /devices/virtual/input/input1244 [ 264.297358] input: syz1 as /devices/virtual/input/input1246 22:41:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x140000000000, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="40bf339d196ee8d9d03ebcb0d6f741ce9584fc0bd3877da454ca6abe1f7422138ef6891f8fa93a91c00af9c1e3b211937289acd31ae5fa4fc6e58b01e35e7a78536bb2cdfe521f3f734d1c3132639e25678e7942cba89ffd0d710ee861bebb783512ef8bcb1b27bf445d80c6112b30da36ecbbb4824646943e9568a4b02fdb8f11f15b73ea057a629bbb664017dbe29b415b3498eb84d34f768eeaf81ba291abaafc137b54fa8193b24d75bb006ca2d5cf4d989bd524ff1a3558db", 0xbb, 0x6}, {&(0x7f0000000280)="35e7e50ab21dad27d6dbeba187abfa7c02b76c731849d22ad6916fdbbcf1e24966a3192f20567c74ac09c63c27ceafa9242f47796559c92b2f5f437ad4e22747e57725394f12752be77ddb37ef8827a49426d3f982a09bf2e374ec5232cf90dc6b0ef4392fd2fb6c7da8711f2741b1323bd60449243eab399eaeda61aae4cd3ff2a3cc", 0x83, 0x7}], 0x1000008, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@nonumtail='nnonumtail=1'}, {@nonumtail='nnonumtail=1'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/uinput\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xbc4f}}, {@obj_user={'obj_user', 0x3d, '/dev/uinput\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.redirect\x00'}}]}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) 22:41:33 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0xffffffff, 0x400) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x400000036) r3 = syz_open_dev$swradio(&(0x7f00000004c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000500)=0x6, &(0x7f0000000540)=0x4) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000140)={r6, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x0, 0x81, 0x10001}, &(0x7f0000000200)=0x98) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) write$P9_RWRITE(r7, &(0x7f0000000380)={0xb, 0x77, 0x1, 0x6}, 0xb) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) fchdir(0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r4, 0x5502) [ 264.422583] input: syz1 as /devices/virtual/input/input1248 [ 264.448007] input: syz1 as /devices/virtual/input/input1249 [ 264.463290] input: syz1 as /devices/virtual/input/input1250 22:41:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000036) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x7, &(0x7f0000000040)={&(0x7f0000000100)=""/253, 0xfd}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:41:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) fchmod(r1, 0x100) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, @multicast2, @empty}, &(0x7f0000000140)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0xb}, r4}, 0x14) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 22:41:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x91d7) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) dup2(r1, r2) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="61000000010000009f2dc2e469c053017c4dad06c4d7f9a328113fabf0bb98ee25c080182a41a2792115f3eafac3bbeff056940750395c2be850084b626f26142f4107f1f64eab100225cbebd11d54f183c77ecf0e778bb94e3fe596510d62a2b7"], 0x20000) ioprio_get$pid(0x1, 0x0) 22:41:33 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 22:41:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x100000000}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00', 0x55}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 264.626785] input: syz1 as /devices/virtual/input/input1253 [ 264.655274] input: syz1 as /devices/virtual/input/input1254 22:41:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000240)={{0x0, 0x1f}, 'syz0\x00'}) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = dup2(r2, r3) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 264.935969] input: syz1 as /devices/virtual/input/input1263 [ 264.948053] input: syz1 as /devices/virtual/input/input1264 22:41:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xd84}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000036) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x4, 0x0, [{0x9ed, 0x0, 0x3}, {0x220}, {0x934, 0x0, 0x1}, {0xb91, 0x0, 0x6}]}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) [ 265.064780] input: syz1 as /devices/virtual/input/input1265 [ 265.085695] input: syz1 as /devices/virtual/input/input1266 [ 265.103248] input: syz1 as /devices/virtual/input/input1267 22:41:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00d05a396461e838ae00e50000050000001f000000000000250000000000000200010000000000102000020000627c05000500000000000a00000000010200000000000000000000000000000001170000020000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000364, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000002c0)={0x7fffffff, 0x7, 0xffffffffffffffff, 0xae, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 265.144798] input: syz1 as /devices/virtual/input/input1268 22:41:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00', 0x1, 0x147841) r1 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="ec0dfea383695289214b712ac4a3a2"], 0x1, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000340)=""/195) ioctl$UI_DEV_DESTROY(r2, 0x5502) dup2(r2, r3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) dup2(r5, r6) fcntl$getownex(r6, 0x10, &(0x7f00000006c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) kexec_load(0x1, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="3e869bef0807f8ae8dcab1f540ff9d665a4bb464b3fbbf6c83acd5d2bf1321c85e2a8dc4d881b493896b432dba322ddfa933c259b8b110744b8c26550730e9e71d870e5ec23b9d1ecc4bc4c12ff1fae7808fdb73bdcbe1a34b8eb0d1c5c46d35feacf5934b05cf53e63f084f1667a8a8eb855b09ccc63dd17ea356db733448548dad038d7a2930b938b2f78e11c1eb4e402637a86e1f098b44ec84719d75b1dc0d78239a90bc0f48142eb7a5af9bf737e768d3e8a7fe858ce2e5aa7f2a0630b83f9c8336b343e01c9b51a0dea9065d40b9c61027610b9793d58f2f348f0c2c9a5ba90d6d7cf417065f", 0xe9, 0xf773, 0x80}, {&(0x7f0000000200)="ae756f21b40a8ea3a9d743918798c62665b6b7f16137a54314513855a00c0286b7ffd1f21e63fe8fe69b80", 0x2b, 0x1}, {&(0x7f0000000540)="8fa1177fb7b76f349fab330bf1b44c92744a2c1e29d3c44822165f2be3f48e7aa9a9e8ddc5687dba2bf7762c1e211c280ca8b1fb02923958a6a6b9e9e48c56f5c1fcec33624d8b0f2ab827a33f2e49391ea99d236b2dc5efbb6813cc9225f9b12c7a93860d9a0e5daec1a84db4d9e2552234b7a8f993900995d9b531bcf925dfcc7d2625cdc7869fac168c8efc962d11850303ba858b146f61827ed360cb050d1684f2311d8f041c5d3f7dd9653bd968d152f83defedb83caaf09f949f761d128da4efb221ace82eea026031", 0xcc, 0x6eb, 0x80000000}], 0x3e0000) 22:41:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) read$rfkill(r0, &(0x7f0000000040), 0x8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x40, 0x0, 0x2233d94f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0) setpgid(r2, r4) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 265.309552] input: syz1 as /devices/virtual/input/input1270 [ 265.328153] input: syz1 as /devices/virtual/input/input1271 22:41:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) 22:41:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00d05a396461e838ae00e50000050000001f000000000000250000000000000200010000000000102000020000627c05000500000000000a00000000010200000000000000000000000000000001170000020000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000364, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 265.367635] input: syz1 as /devices/virtual/input/input1273 [ 265.435958] input: syz1 as /devices/virtual/input/input1274 22:41:34 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, r9, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) r13 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r14, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r15 = socket$kcm(0x10, 0x2, 0x0) r16 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r14, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r17, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r14, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r14}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r15, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r13}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r16, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r13}]) name_to_handle_at(r14, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r18}, 0x14) r19 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r20 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r20, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r21 = socket$kcm(0x10, 0x2, 0x0) r22 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r20, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r23, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r20, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r20}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r21, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r19}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r22, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r19}]) name_to_handle_at(r20, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r20, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r24}, 0x14) r25 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r26, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r27 = socket$kcm(0x10, 0x2, 0x0) r28 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r26, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r29, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r26, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r26}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r27, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r25}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r28, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r25}]) name_to_handle_at(r26, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r26, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r30}, 0x14) r31 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r32 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r32, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r33 = socket$kcm(0x10, 0x2, 0x0) r34 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r32, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r35, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r32, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r32}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r33, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r31}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r34, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r31}]) name_to_handle_at(r32, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r32, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r36}, 0x14) r37 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r38 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r38, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r39 = socket$kcm(0x10, 0x2, 0x0) r40 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r38, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r41, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r38, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r38}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r39, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r37}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r40, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r37}]) name_to_handle_at(r38, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r38, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r42}, 0x14) r43 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}, &(0x7f00000005c0)=0x14) r45 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r46 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r46, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r47 = socket$kcm(0x10, 0x2, 0x0) r48 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r46, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r49, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r46, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r46}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r47, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r45}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r48, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r45}]) name_to_handle_at(r46, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r46, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r50}, 0x14) r51 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r52 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r52, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r53 = socket$kcm(0x10, 0x2, 0x0) r54 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r52, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r55, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r52, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r52}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r53, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r51}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r54, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r51}]) name_to_handle_at(r52, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r52, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r56}, 0x14) r57 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r58 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r58, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r59 = socket$kcm(0x10, 0x2, 0x0) r60 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r58, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r61, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r58, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r58}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r59, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r57}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r60, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r57}]) name_to_handle_at(r58, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r58, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r62}, 0x14) r63 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r64 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r64, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r65 = socket$kcm(0x10, 0x2, 0x0) r66 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x1000000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r64, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r67, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r64, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r64}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r65, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r63}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r66, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r63}]) name_to_handle_at(r64, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r64, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r68}, 0x14) r69 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r70 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r70, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r71 = socket$kcm(0x10, 0x2, 0x0) r72 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r70, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r73, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r70, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r70}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r71, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r69}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r72, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r69}]) name_to_handle_at(r70, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r70, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r74}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) r76 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r77 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r77, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r78 = socket$kcm(0x10, 0x2, 0x0) r79 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r77, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r80, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r77, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r77}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r78, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r76}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r79, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r76}]) name_to_handle_at(r77, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r77, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xffffffffffffffd9) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r81}, 0x14) r82 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r83 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r83, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r84 = socket$kcm(0x10, 0x2, 0x0) r85 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r83, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r86, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r83, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r83}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r84, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r82}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r85, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r82}]) name_to_handle_at(r83, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r83, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r87}, 0x14) r88 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r89 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r89, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r90 = socket$kcm(0x10, 0x2, 0x0) r91 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r89, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r92, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r89, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r89}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r90, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r88}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r91, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r88}]) name_to_handle_at(r89, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r89, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r93}, 0x14) r94 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8f, 0x280) r95 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r95, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r96 = socket$kcm(0x10, 0x2, 0x0) r97 = perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) fstat(r95, &(0x7f0000002fc0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r98, 0x3, &(0x7f0000002a40)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe00, r95, &(0x7f0000002740)="39f4e00b7be1699c4c06b885eec8164711edaf25138d18519a09bec45c4a529fc0bd16ebc2f16957cb0f13176c22d58235451563b7332697f270d5d3143000afb2a3b82d4b48514c0025a0e7", 0x4c, 0xdf0a, 0x0, 0x2, r95}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, r96, &(0x7f0000002800)="13c75240dc38b6c94d40bbefb651bad1f339118d35eee143854a957662280e2c94834dd8f43e07a62e49403e1a77bccf5857a4ccfa728ca088490733765939d8400319a4ea0d50d89cbf70c33e52af41ab3d612facac3038ee71cc1136466a36ee589bac77bf33145b14a7d8466a1b138b8c552ef36c69a720348603f7b01f10a074c9a12227cea73ea244a17d9fec9d3ba129a1677e06b94a9997e3cf759939c3428bc613cb169b1df50aab473ed815bc74dcea225afbe9c45a14f1c795295cbe1aabd624e11fee8121194c7afbe0ccdeffa8b9191635d8c87417c3f7", 0xdd, 0x4, 0x0, 0x0, r94}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, r97, &(0x7f0000002940)="80e988c7a590733dbb1d1970c35237cf5ff06866706666ebc8fc66ded0d3ce2bca7008f62e3835e350448d33a1fd05e9b71dad323bd08bfcd4746285074a919329cd375ff915e092971b0663ce3ecc8d1dd932943e80979903f0ff419c3f4c8af8305f84811e680d3f491ef22c6dc478500a6160edbaed7afca21495ee742ec011801590accbb1b54e3562278b7383d04c8490ca8d057e28ee29fab858d4ddb0c6c5f181a92048e30355fa5c5baab86b08a86de885854613b0ca454549", 0xbd, 0x800000000, 0x0, 0x2, r94}]) name_to_handle_at(r95, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0xff, 0x4, "5fb5073b8fadb0a434da6d23b8bdcbbce39376a0193f99320217676c1083104dba22e1d1be3b757903351e3c600619e38e82a42e8e20a90bb664758de254a1bd170365ff7f3bf62be3a25213f6822b6c804204664fd2fe401791eb86dcb7922eb3dcfd0c6ac45eab605631dc7a520899cab42016d53cef5c4650d653e10db14ac2e581c489fbe681fe497a09d4f61a5d0a52be2f07699b090cf3015d9a17140b1a53b80623c7ddbf2b08cee5c6a8ad796f368830d35861f4206585a6098ce2a6ddd5baa32ff0bb356c4c76bd057d41a6e79152c992681623a08761006b8ed03f83ce36c73c0a814352e7541efba2c4596e343fbb3471ce"}, &(0x7f0000002c00), 0x1000) getsockopt$inet_IP_IPSEC_POLICY(r95, 0x0, 0x10, &(0x7f0000002d40)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004480)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, r99}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000001080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)={0x8e8, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r12}, {0xa4, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x10001, 0x1, 0x8427, 0xb}, {0x8, 0xfffffffffffffff9, 0x3ff, 0xb2}, {0x7, 0x7fffffff, 0x6c5, 0x80}, {0xffff, 0x9, 0x8000, 0x100}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r18}, {0x218, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x650}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x23e1b287}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4c2}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r42}, {0x1b8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r44}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x57a7fcd}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r50}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x1, 0x3ae, 0x1, 0x101}, {0x9, 0x100000001, 0x7ff, 0x2}, {0x7, 0x36f, 0x5, 0x8}]}}}]}}, {{0x8, 0x1, r2}, {0xf4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x79dad351}}, {0x8, 0x6, r56}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x96}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4125}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r62}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r99}}}]}}, {{0x8, 0x1, r2}, {0x180, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r68}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r74}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r75}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r81}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r87}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r93}, {0x12c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$UI_DEV_DESTROY(r5, 0x5502) dup2(r5, r6) r100 = dup2(r0, r6) ioctl$DRM_IOCTL_AGP_INFO(r100, 0x80386433, &(0x7f0000000340)=""/162) fchownat(r0, &(0x7f0000000080)='./file0\x00', r3, r4, 0x400) 22:41:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) 22:41:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00d05a396461e838ae00e50000050000001f000000000000250000000000000200010000000000102000020000627c05000500000000000a00000000010200000000000000000000000000000001170000020000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000364, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) [ 265.565505] input: syz1 as /devices/virtual/input/input1280 [ 265.641706] input: syz1 as /devices/virtual/input/input1281 [ 265.651343] input: syz1 as /devices/virtual/input/input1282 [ 265.669862] input: syz1 as /devices/virtual/input/input1283 [ 265.707169] input: syz1 as /devices/virtual/input/input1284 [ 265.772438] input: syz1 as /devices/virtual/input/input1287 22:41:34 executing program 2 (fault-call:20 fault-nth:0): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000580)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000380)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r2, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x10001, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000001600)={0x3}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r5 = memfd_create(&(0x7f0000000380)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:41:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x870x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, r2}, 0x14) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x400000, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{0x3}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00', 0xfffffffffffffffc}) [ 265.814482] input: syz1 as /devices/virtual/input/input1289 22:41:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000100)=0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) 22:41:34 executing program 1: r0 = semget$private(0x0, 0x1, 0x4) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/189) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000200), 0x1, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) pipe(&(0x7f0000000380)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\xff\x00'}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) dup2(r3, r4) fchdir(r3) dup2(r1, r2) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000340)=',\x00', 0x2, 0x4) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'security.ima\x00'}, {0x20, 'security.ima\x00'}, {0x20, '/dev\x02\x00\x00\x00\x00\x00\x00\x00/00#/00#\x00'}], 0xa, "60ff9305cdf89055b116950f5ba830e8f37065fb85bf4fbb2887328b645d4f284601a5b7ff8941f7a6e5e46d45e434323042b90314154298eb76fff6ce4bce2262613e169c3d2f00f442bf99f6a6d73efa68588742a66bcad5f2f58df97162c540c17f4aedd9e5a5b0b17f1f54"}, 0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd}) [ 265.949812] FAULT_INJECTION: forcing a failure. [ 265.949812] name failslab, interval 1, probability 0, space 0, times 0 [ 265.963975] input: syz1 as /devices/virtual/input/input1292 [ 266.006327] input: syz1 as /devices/virtual/input/input1295 [ 266.023298] input: syz1 as /devices/virtual/input/input1293 [ 266.053296] CPU: 0 PID: 15976 Comm: syz-executor.2 Not tainted 4.14.142 #0 [ 266.060459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.060465] Call Trace: [ 266.060486] dump_stack+0x138/0x197 [ 266.060505] should_fail.cold+0x10f/0x159 [ 266.060521] should_failslab+0xdb/0x130 [ 266.060532] kmem_cache_alloc_trace+0x2e9/0x790 [ 266.060543] ? __lockdep_init_map+0x10c/0x570 [ 266.060561] ? loop_get_status64+0x120/0x120 [ 266.060572] __kthread_create_on_node+0xe3/0x3e0 [ 266.060584] ? kthread_park+0x140/0x140 [ 266.060592] ? SOFTIRQ_verbose+0x10/0x10 [ 266.060603] ? __fget+0x210/0x370 [ 266.060624] ? loop_get_status64+0x120/0x120 [ 266.060635] kthread_create_on_node+0xa8/0xd0 [ 266.060645] ? __kthread_create_on_node+0x3e0/0x3e0 [ 266.060657] ? __lockdep_init_map+0x10c/0x570 [ 266.060674] lo_ioctl+0xcf7/0x1ce0 [ 266.060687] ? loop_probe+0x160/0x160 [ 266.072741] blkdev_ioctl+0x96b/0x1860 [ 266.072752] ? blkpg_ioctl+0x980/0x980 [ 266.072762] ? perf_trace_lock+0x109/0x500 [ 266.072778] ? __might_sleep+0x93/0xb0 [ 266.080538] ? __fget+0x210/0x370 [ 266.080553] block_ioctl+0xde/0x120 [ 266.080563] ? blkdev_fallocate+0x3b0/0x3b0 [ 266.080572] do_vfs_ioctl+0x7ae/0x1060 [ 266.080584] ? check_preemption_disabled+0x3c/0x250 [ 266.080593] ? ioctl_preallocate+0x1c0/0x1c0 [ 266.080611] ? security_file_ioctl+0x40/0xb0 [ 266.080619] ? security_file_ioctl+0x51/0xb0 [ 266.080629] ? security_file_ioctl+0x89/0xb0 [ 266.080640] SyS_ioctl+0x8f/0xc0 [ 266.080648] ? do_vfs_ioctl+0x1060/0x1060 22:41:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\t\x87\xd3\xc0\x93\xb5.\xda\a_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90), 0x0, 0x4081003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x11, 0x0, "6682122027b925e861cf1bcb2b8140060e4d99eb4c7e0dcd636c18a3056c302ed35630f079000000000000000049819f16d9000000001900", "ab13fede93410a1f2fc7b89e7a7d619abfcde097b08c3d6c5d00a7cd51b55edcb63d4bd33dc01b7325b3b92ce16ef70000000000000000e15edbaecfe7480ae7", "d9b023b1e59db5e0e3bb36eac7f2dd3f3ef296677f38ba3dbc97d16742aca1fc", [0xf]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x110, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 266.098256] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2093c2c6d4 [ 266.098261] R13: 00000000004c2fb9 R14: 00000000004d6738 R15: 000000000000000a [ 266.265847] refcount_t: increment on 0; use-after-free. [ 266.271975] ------------[ cut here ]------------ [ 266.276768] WARNING: CPU: 1 PID: 16003 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 266.285013] Kernel panic - not syncing: panic_on_warn set ... [ 266.285013] [ 266.292478] CPU: 1 PID: 16003 Comm: syz-executor.1 Not tainted 4.14.142 #0 [ 266.299488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.308913] Call Trace: [ 266.311488] dump_stack+0x138/0x197 [ 266.315101] panic+0x1f2/0x426 [ 266.318363] ? add_taint.cold+0x16/0x16 [ 266.322321] ? refcount_inc.cold+0x18/0x1f [ 266.326539] ? __warn.cold+0x14/0x36 [ 266.330242] ? refcount_inc.cold+0x18/0x1f [ 266.334461] __warn.cold+0x2f/0x36 [ 266.337998] ? ist_end_non_atomic+0x10/0x10 [ 266.342302] ? refcount_inc.cold+0x18/0x1f [ 266.346522] report_bug+0x216/0x254 [ 266.350137] do_error_trap+0x1bb/0x310 [ 266.354096] ? math_error+0x360/0x360 [ 266.357891] ? vprintk_emit+0x171/0x600 [ 266.361871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.366707] do_invalid_op+0x1b/0x20 [ 266.370410] invalid_op+0x1b/0x40 [ 266.373941] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 266.378848] RSP: 0018:ffff8880588af980 EFLAGS: 00010286 [ 266.384194] RAX: 000000000000002b RBX: 1ffff1100b115f3d RCX: 0000000000000000 [ 266.391450] RDX: 0000000000009add RSI: ffffffff814b3e45 RDI: ffffed100b115f26 [ 266.398703] RBP: ffff8880588af988 R08: 000000000000002b R09: ffff88805adaad20 [ 266.405964] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805d3a3160 [ 266.413306] R13: 0000000000000000 R14: ffff8880a6fa5340 R15: ffff88809f603488 [ 266.420662] ? vprintk_func+0x65/0x159 [ 266.424538] kobject_get+0x5b/0x70 [ 266.428074] cdev_get+0x54/0xa0 [ 266.431337] chrdev_open+0x9b/0x590 [ 266.434947] ? cdev_put.part.0+0x50/0x50 [ 266.439000] ? security_file_open+0x89/0x190 [ 266.443396] do_dentry_open+0x73b/0xeb0 [ 266.447354] ? cdev_put.part.0+0x50/0x50 [ 266.451486] vfs_open+0x105/0x220 [ 266.454924] path_openat+0x8bd/0x3f70 [ 266.458760] ? debug_smp_processor_id+0x1c/0x20 [ 266.463431] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 266.468083] ? find_held_lock+0x35/0x130 [ 266.472135] ? SOFTIRQ_verbose+0x10/0x10 [ 266.476180] ? __alloc_fd+0x1d4/0x4a0 [ 266.480139] do_filp_open+0x18e/0x250 [ 266.483931] ? may_open_dev+0xe0/0xe0 [ 266.487720] ? _raw_spin_unlock+0x2d/0x50 [ 266.491855] ? __alloc_fd+0x1d4/0x4a0 [ 266.495658] do_sys_open+0x2c5/0x430 [ 266.499354] ? filp_open+0x70/0x70 [ 266.502883] ? SyS_clock_gettime+0xf8/0x180 [ 266.507399] SyS_open+0x2d/0x40 [ 266.510714] ? do_sys_open+0x430/0x430 [ 266.514622] do_syscall_64+0x1e8/0x640 [ 266.518705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.523574] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.528790] RIP: 0033:0x4137d1 [ 266.531965] RSP: 002b:00007fd21aac37a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 266.540610] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1 [ 266.547871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fd21aac3850 [ 266.555126] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 266.562389] R10: 00007fd21aac49d0 R11: 0000000000000293 R12: 00007fd21aac46d4 [ 266.569661] R13: 00000000004c8c84 R14: 00000000004dfc48 R15: 00000000ffffffff [ 266.579455] Kernel Offset: disabled [ 266.583334] Rebooting in 86400 seconds..