[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   40.917196][   T26] audit: type=1800 audit(1571092684.450:25): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   40.944430][   T26] audit: type=1800 audit(1571092684.450:26): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   40.985545][   T26] audit: type=1800 audit(1571092684.450:27): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.216' (ECDSA) to the list of known hosts.
2019/10/14 22:38:14 fuzzer started
2019/10/14 22:38:15 dialing manager at 10.128.0.105:33683
2019/10/14 22:38:15 syscalls: 2523
2019/10/14 22:38:15 code coverage: enabled
2019/10/14 22:38:15 comparison tracing: enabled
2019/10/14 22:38:15 extra coverage: extra coverage is not supported by the kernel
2019/10/14 22:38:15 setuid sandbox: enabled
2019/10/14 22:38:15 namespace sandbox: enabled
2019/10/14 22:38:15 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/14 22:38:15 fault injection: enabled
2019/10/14 22:38:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/14 22:38:15 net packet injection: enabled
2019/10/14 22:38:15 net device setup: enabled
2019/10/14 22:38:15 concurrency sanitizer: enabled
22:38:19 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

syzkaller login: [   55.719160][ T7147] IPVS: ftp: loaded support on port[0] = 21
22:38:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   55.813268][ T7147] chnl_net:caif_netlink_parms(): no params data found
[   55.877027][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.900451][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.908526][ T7147] device bridge_slave_0 entered promiscuous mode
[   55.932895][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.940021][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.948664][ T7147] device bridge_slave_1 entered promiscuous mode
[   55.972563][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.983841][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.026757][ T7147] team0: Port device team_slave_0 added
[   56.041785][ T7147] team0: Port device team_slave_1 added
22:38:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[   56.143827][ T7147] device hsr_slave_0 entered promiscuous mode
[   56.210730][ T7147] device hsr_slave_1 entered promiscuous mode
[   56.257436][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.264611][ T7147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.271956][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.279041][ T7147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.329534][ T7150] IPVS: ftp: loaded support on port[0] = 21
[   56.429362][ T7152] IPVS: ftp: loaded support on port[0] = 21
[   56.444582][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.488177][ T7147] 8021q: adding VLAN 0 to HW filter on device team0
[   56.525485][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.534800][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.554710][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.565231][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
22:38:20 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

[   56.607709][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.616776][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.623907][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.637663][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.655043][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.662156][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.708969][ T7150] chnl_net:caif_netlink_parms(): no params data found
[   56.773124][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.792297][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.811612][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.870078][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.879135][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.903782][ T7147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.931480][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.938559][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.962894][ T7150] device bridge_slave_0 entered promiscuous mode
[   56.989998][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.009869][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.017767][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.027984][ T7150] device bridge_slave_1 entered promiscuous mode
22:38:20 executing program 4:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[   57.048653][ T7157] IPVS: ftp: loaded support on port[0] = 21
[   57.119363][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.155908][ T7152] chnl_net:caif_netlink_parms(): no params data found
[   57.177025][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
22:38:20 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   57.331197][ T7150] team0: Port device team_slave_0 added
[   57.360682][ T7150] team0: Port device team_slave_1 added
[   57.415880][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.430481][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.470712][ T7152] device bridge_slave_0 entered promiscuous mode
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   57.538797][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.546099][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.557235][ T7152] device bridge_slave_1 entered promiscuous mode
[   57.615830][ T7150] device hsr_slave_0 entered promiscuous mode
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

22:38:21 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   57.673197][ T7150] device hsr_slave_1 entered promiscuous mode
[   57.700505][ T7150] debugfs: Directory 'hsr0' with parent '/' already present!
[   57.729653][ T7169] IPVS: ftp: loaded support on port[0] = 21
[   57.773772][ T7157] chnl_net:caif_netlink_parms(): no params data found
[   57.804586][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.811726][ T7150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.827491][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   57.880325][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.915381][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.985216][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.018089][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.026451][ T7157] device bridge_slave_0 entered promiscuous mode
[   58.037913][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.045179][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.053405][ T7157] device bridge_slave_1 entered promiscuous mode
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   58.101054][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.111258][ T7152] team0: Port device team_slave_0 added
[   58.119094][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.138633][ T7182] IPVS: ftp: loaded support on port[0] = 21
[   58.154565][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.177489][ T7152] team0: Port device team_slave_1 added
[   58.187767][ T7150] 8021q: adding VLAN 0 to HW filter on device team0
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   58.230841][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.238750][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.304069][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.313556][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.324194][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.331347][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state
22:38:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   58.355153][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.364619][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.388074][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.395197][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.409288][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.433753][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.445544][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.455328][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.477458][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.486687][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.497090][ T7157] team0: Port device team_slave_0 added
[   58.504980][ T7157] team0: Port device team_slave_1 added
[   58.525304][ T7169] chnl_net:caif_netlink_parms(): no params data found
[   58.536537][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.612916][ T7152] device hsr_slave_0 entered promiscuous mode
[   58.660953][ T7152] device hsr_slave_1 entered promiscuous mode
[   58.700558][ T7152] debugfs: Directory 'hsr0' with parent '/' already present!
[   58.793831][ T7157] device hsr_slave_0 entered promiscuous mode
[   58.830938][ T7157] device hsr_slave_1 entered promiscuous mode
[   58.870637][ T7157] debugfs: Directory 'hsr0' with parent '/' already present!
[   58.895213][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.903807][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.920970][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.929454][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.944281][ T7150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.953786][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.961711][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.969607][ T7169] device bridge_slave_0 entered promiscuous mode
[   58.977235][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.984641][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.992812][ T7169] device bridge_slave_1 entered promiscuous mode
[   59.048242][ T7169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.062595][ T7169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.105097][ T7169] team0: Port device team_slave_0 added
[   59.113154][ T7169] team0: Port device team_slave_1 added
[   59.125825][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.150246][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.162054][ T7182] chnl_net:caif_netlink_parms(): no params data found
[   59.196004][ T7152] 8021q: adding VLAN 0 to HW filter on device team0
[   59.219688][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.227730][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.283354][ T7169] device hsr_slave_0 entered promiscuous mode
[   59.330859][ T7169] device hsr_slave_1 entered promiscuous mode
[   59.400600][ T7169] debugfs: Directory 'hsr0' with parent '/' already present!
[   59.440716][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.468927][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.478831][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.491527][    C1] hrtimer: interrupt took 30681 ns
[   59.510305][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.517421][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.526324][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.535403][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.539713][ T7204] input: syz1 as /devices/virtual/input/input5
[   59.558882][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.566006][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.581908][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.591838][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.603151][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.612306][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.623080][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.632290][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.642278][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.650998][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.675417][ T7157] 8021q: adding VLAN 0 to HW filter on device team0
[   59.683134][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.697508][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.707192][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.716487][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
22:38:23 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   59.724900][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.736591][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.745667][ T7182] device bridge_slave_0 entered promiscuous mode
[   59.787510][ T7157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.798994][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.818058][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.826067][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.839268][ T7182] device bridge_slave_1 entered promiscuous mode
[   59.857435][ T7169] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.869460][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   59.878228][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.888820][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.897505][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.904753][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.917361][ T7212] input: syz1 as /devices/virtual/input/input7
[   59.917957][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.937405][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.946315][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.953442][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.968423][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.978019][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.992160][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.005203][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.014312][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.023914][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.033019][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.041885][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.051301][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.059911][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.070668][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.078764][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.087422][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.095624][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.104600][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.132024][ T7169] 8021q: adding VLAN 0 to HW filter on device team0
[   60.150488][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.170201][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.191367][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.199411][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.210660][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.225431][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.234902][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.264870][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.273840][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.283027][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.290077][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.298233][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.306890][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.315566][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.322620][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.330955][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.340325][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.351670][ T7182] team0: Port device team_slave_0 added
[   60.362369][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.386752][ T7169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.398205][ T7169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.411177][ T7182] team0: Port device team_slave_1 added
[   60.428858][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.437545][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.446852][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.455755][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.464526][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.473000][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.481647][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.490081][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.498655][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.507131][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.572924][ T7182] device hsr_slave_0 entered promiscuous mode
[   60.610858][ T7182] device hsr_slave_1 entered promiscuous mode
[   60.650505][ T7182] debugfs: Directory 'hsr0' with parent '/' already present!
[   60.701358][ T7169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.755280][ T7228] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   60.800601][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.834001][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   60.852364][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.870733][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.888291][ T7182] 8021q: adding VLAN 0 to HW filter on device team0
[   60.919754][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.935717][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.951278][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.958328][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.987722][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.024926][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
22:38:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   61.043842][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.070023][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.077172][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.094400][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.107497][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.127245][ T7182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.171557][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.213489][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.239024][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.275100][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.298435][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.374632][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0
22:38:25 executing program 4:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:25 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:25 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

[   61.660850][ T7260] input: syz1 as /devices/virtual/input/input8
22:38:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:25 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

22:38:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:25 executing program 0:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:25 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:25 executing program 4:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[   62.177842][ T7286] input: syz1 as /devices/virtual/input/input9
22:38:26 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:26 executing program 4:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:26 executing program 0:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:26 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x2b7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
shutdown(r0, 0x0)
epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

22:38:26 executing program 1:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:26 executing program 0:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:26 executing program 1:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

22:38:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:26 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:26 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:26 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:26 executing program 1:
syz_open_dev$cec(0x0, 0x1, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000000c0)={0x2, 0x0, @ioapic})
socket$can_bcm(0x1d, 0x2, 0x2)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fchown(0xffffffffffffffff, 0x0, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[   63.455748][ T7330] input: syz1 as /devices/virtual/input/input10
[   63.475735][ T7327] input: syz1 as /devices/virtual/input/input11
22:38:27 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:27 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:27 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   64.060958][ T7347] input: syz1 as /devices/virtual/input/input12
[   64.062412][ T7355] input: syz1 as /devices/virtual/input/input13
22:38:27 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:27 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40004008af25, &(0x7f0000000300))

22:38:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000002c0)={0x0, 0x0, 'client1\x00', 0x0, "302a757be77ef013", "a2395feb8a9b65d659a8a352dc2d7b4befce9584f854b7ab9ab8eecc7dc69015"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:38:27 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   64.350719][ T7370] input: syz1 as /devices/virtual/input/input14
[   64.358383][ T7371] input: syz1 as /devices/virtual/input/input15
22:38:27 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   64.792846][ T7390] input: syz1 as /devices/virtual/input/input17
[   64.808591][ T7382] input: syz1 as /devices/virtual/input/input16
[   64.848177][ T7395] input: syz1 as /devices/virtual/input/input18
[   64.914026][ T7399] input: syz1 as /devices/virtual/input/input20
[   64.942594][ T7392] input: syz1 as /devices/virtual/input/input19
[   65.077274][ T7407] input: syz1 as /devices/virtual/input/input21
22:38:28 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:28 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   65.519412][ T7429] input: syz1 as /devices/virtual/input/input22
[   65.550776][ T7431] input: syz1 as /devices/virtual/input/input24
[   65.558518][ T7426] input: syz1 as /devices/virtual/input/input23
22:38:29 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   65.719810][ T7441] input: syz1 as /devices/virtual/input/input25
[   65.771731][ T7447] input: syz1 as /devices/virtual/input/input26
[   65.922345][ T7451] input: syz1 as /devices/virtual/input/input27
22:38:29 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:29 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:29 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:29 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   66.273748][ T7462] input: syz1 as /devices/virtual/input/input28
[   66.281177][ T7467] input: syz1 as /devices/virtual/input/input29
[   66.302998][ T7468] input: syz1 as /devices/virtual/input/input30
22:38:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   66.614927][ T7485] input: syz1 as /devices/virtual/input/input31
[   66.622994][ T7486] input: syz1 as /devices/virtual/input/input32
[   66.632621][ T7487] input: syz1 as /devices/virtual/input/input33
22:38:30 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   66.847926][ T7497] input: syz1 as /devices/virtual/input/input34
22:38:30 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:30 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

22:38:30 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   67.091621][ T7501] input: syz1 as /devices/virtual/input/input35
[   67.122393][ T7508] input: syz1 as /devices/virtual/input/input36
22:38:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   67.246112][ T7511] input: syz1 as /devices/virtual/input/input37
[   67.312985][ T7521] input: syz1 as /devices/virtual/input/input38
22:38:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   67.474012][ T7531] input: syz1 as /devices/virtual/input/input39
[   67.492641][ T7532] input: syz1 as /devices/virtual/input/input40
[   67.533650][ T7266] ==================================================================
[   67.542928][ T7266] BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor
[   67.550726][ T7266] 
[   67.553062][ T7266] write to 0xffffffff860bff44 of 4 bytes by task 4176 on cpu 0:
[   67.560698][ T7266]  tomoyo_supervisor+0x1c9/0xd20
[   67.565651][ T7266]  tomoyo_path_permission+0x121/0x160
[   67.571167][ T7266]  tomoyo_path_perm+0x23e/0x390
[   67.576109][ T7266]  tomoyo_inode_getattr+0x26/0x40
[   67.581137][ T7266]  security_inode_getattr+0x9b/0xd0
[   67.586517][ T7266]  vfs_getattr+0x2e/0x70
[   67.590759][ T7266]  vfs_statx+0x102/0x190
[   67.595090][ T7266]  __do_sys_newlstat+0x51/0xb0
[   67.600114][ T7266]  __x64_sys_newlstat+0x3a/0x50
[   67.605353][ T7266]  do_syscall_64+0xcf/0x2f0
[   67.610645][ T7266]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.616611][ T7266] 
[   67.619806][ T7266] read to 0xffffffff860bff44 of 4 bytes by task 7266 on cpu 1:
[   67.627349][ T7266]  tomoyo_supervisor+0x1b0/0xd20
[   67.632285][ T7266]  tomoyo_path_permission+0x121/0x160
[   67.637734][ T7266]  tomoyo_check_open_permission+0x2fd/0x320
[   67.643638][ T7266]  tomoyo_file_open+0x75/0x90
[   67.648313][ T7266]  security_file_open+0x69/0x210
[   67.653532][ T7266]  do_dentry_open+0x20a/0x900
[   67.658205][ T7266]  vfs_open+0x62/0x80
[   67.662181][ T7266]  path_openat+0xf75/0x3530
[   67.666685][ T7266]  do_filp_open+0x11e/0x1b0
[   67.671210][ T7266]  do_sys_open+0x3b3/0x4f0
[   67.675623][ T7266]  __x64_sys_open+0x55/0x70
[   67.680128][ T7266]  do_syscall_64+0xcf/0x2f0
[   67.686193][ T7266]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.692065][ T7266] 
[   67.695165][ T7266] Reported by Kernel Concurrency Sanitizer on:
[   67.701319][ T7266] CPU: 1 PID: 7266 Comm: udevd Not tainted 5.3.0+ #0
[   67.707985][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   67.718934][ T7266] ==================================================================
[   67.727002][ T7266] Kernel panic - not syncing: panic_on_warn set ...
[   67.733869][ T7266] CPU: 1 PID: 7266 Comm: udevd Not tainted 5.3.0+ #0
[   67.740732][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   67.748184][ T7535] input: syz1 as /devices/virtual/input/input41
[   67.750803][ T7266] Call Trace:
[   67.750827][ T7266]  dump_stack+0xf5/0x159
[   67.750844][ T7266]  panic+0x209/0x639
[   67.750860][ T7266]  ? do_filp_open+0x11e/0x1b0
[   67.750876][ T7266]  ? vprintk_func+0x8d/0x140
[   67.750895][ T7266]  kcsan_report.cold+0xc/0x1b
22:38:31 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   67.750913][ T7266]  __kcsan_setup_watchpoint+0x3ee/0x510
[   67.750929][ T7266]  __tsan_read4+0x2c/0x30
[   67.750945][ T7266]  tomoyo_supervisor+0x1b0/0xd20
[   67.750960][ T7266]  ? __kcsan_setup_watchpoint+0x96/0x510
[   67.750976][ T7266]  ? __kcsan_setup_watchpoint+0x96/0x510
[   67.750992][ T7266]  ? __tsan_write1+0x32/0x40
[   67.751022][ T7266]  ? tomoyo_compare_name_union+0xa0/0xa0
[   67.818867][ T7266]  tomoyo_path_permission+0x121/0x160
[   67.824246][ T7266]  tomoyo_check_open_permission+0x2fd/0x320
[   67.830158][ T7266]  tomoyo_file_open+0x75/0x90
[   67.834844][ T7266]  security_file_open+0x69/0x210
[   67.839781][ T7266]  do_dentry_open+0x20a/0x900
[   67.844461][ T7266]  ? security_inode_permission+0xa5/0xc0
[   67.850092][ T7266]  ? __kcsan_setup_watchpoint+0x96/0x510
[   67.855728][ T7266]  vfs_open+0x62/0x80
[   67.859708][ T7266]  path_openat+0xf75/0x3530
[   67.864211][ T7266]  ? __kcsan_setup_watchpoint+0x96/0x510
[   67.869881][ T7266]  ? __kcsan_setup_watchpoint+0x96/0x510
[   67.875519][ T7266]  ? __sanitizer_cov_trace_switch+0x49/0x80
22:38:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880))
socket(0x0, 0x80001, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000000c0)={{}, 0x12, 0x8001}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000fa070c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x2, 0x1}, 0x3c)
syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00')
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a55d20d16606f10a000c0000004c0000000200efff00000000000000040200000000"], 0x0, 0x25}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x8, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x1}, 0x3c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000402"], 0x0, 0x21}, 0x20)

[   67.881421][ T7266]  do_filp_open+0x11e/0x1b0
[   67.885929][ T7266]  ? __alloc_fd+0x316/0x4c0
[   67.890440][ T7266]  do_sys_open+0x3b3/0x4f0
[   67.894868][ T7266]  __x64_sys_open+0x55/0x70
[   67.899377][ T7266]  do_syscall_64+0xcf/0x2f0
[   67.903898][ T7266]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.909788][ T7266] RIP: 0033:0x7fcd1c940120
[   67.914212][ T7266] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[   67.933864][ T7266] RSP: 002b:00007ffc6ccb3fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   67.942274][ T7266] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd1c940120
[   67.950242][ T7266] RDX: 0000000000000124 RSI: 0000000000080000 RDI: 00007ffc6ccb4070
[   67.958213][ T7266] RBP: 000000000041efca R08: 000000000041efca R09: 00007fcd1c995a40
[   67.966183][ T7266] R10: 7269762f73656369 R11: 0000000000000246 R12: 00000000014a92d0
[   67.974151][ T7266] R13: 00000000014a93c0 R14: 00000000014a9250 R15: 00000000014aee10
[   67.983634][ T7266] Kernel Offset: disabled
[   67.987991][ T7266] Rebooting in 86400 seconds..