[ 31.991768] audit: type=1800 audit(1538869287.127:26): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 31.991789] audit: type=1800 audit(1538869287.127:27): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 32.056241] audit: type=1800 audit(1538869287.207:28): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 32.591349] audit: type=1800 audit(1538869287.747:29): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.24' (ECDSA) to the list of known hosts. 2018/10/06 23:41:36 fuzzer started 2018/10/06 23:41:38 dialing manager at 10.128.0.26:40709 2018/10/06 23:41:38 syscalls: 1 2018/10/06 23:41:38 code coverage: enabled 2018/10/06 23:41:38 comparison tracing: enabled 2018/10/06 23:41:38 setuid sandbox: enabled 2018/10/06 23:41:38 namespace sandbox: enabled 2018/10/06 23:41:38 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 23:41:38 fault injection: enabled 2018/10/06 23:41:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 23:41:38 net packed injection: enabled 2018/10/06 23:41:38 net device setup: enabled 23:43:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x2, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) syzkaller login: [ 154.800950] IPVS: ftp: loaded support on port[0] = 21 23:43:30 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/122, 0x7a}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_trie\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000054, 0x400000a) [ 155.002852] IPVS: ftp: loaded support on port[0] = 21 23:43:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x5}) [ 155.224820] IPVS: ftp: loaded support on port[0] = 21 23:43:30 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000000)) [ 155.556242] IPVS: ftp: loaded support on port[0] = 21 23:43:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="fec6636d2e70453f77"], &(0x7f0000003ff6)="73797a7b616c6c65cce1", 0x0, 0xc3, &(0x7f0000000200)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x67}, [], {0x95, 0x0, 0x0, 0x48000000}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 155.985842] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.995623] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.003921] device bridge_slave_0 entered promiscuous mode [ 156.113327] IPVS: ftp: loaded support on port[0] = 21 [ 156.151166] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.157564] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.170017] device bridge_slave_1 entered promiscuous mode [ 156.264518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 23:43:31 executing program 5: r0 = memfd_create(&(0x7f0000000080)='#posix_acl_access\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x517565}, @connect}], 0xffffff76) [ 156.374098] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.409510] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.422354] device bridge_slave_0 entered promiscuous mode [ 156.431396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.487475] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.509134] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.522360] device bridge_slave_1 entered promiscuous mode [ 156.557631] IPVS: ftp: loaded support on port[0] = 21 [ 156.640862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.729092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.754897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 156.766043] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.775196] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.787614] device bridge_slave_0 entered promiscuous mode [ 156.855178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 156.882534] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.888949] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.902608] device bridge_slave_1 entered promiscuous mode [ 156.971213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 156.979601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.010764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.033994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.085519] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.098041] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.109960] device bridge_slave_0 entered promiscuous mode [ 157.120518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.131204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.195130] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.206344] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.214285] device bridge_slave_1 entered promiscuous mode [ 157.330730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.338031] team0: Port device team_slave_0 added [ 157.373744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.395158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.420481] team0: Port device team_slave_1 added [ 157.427555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.454008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.508857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.543444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.576713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.607360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.643195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.663776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.681200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.690753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.715555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.750159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.769648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.776731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.788160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.829379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.841441] team0: Port device team_slave_0 added [ 157.854504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.915968] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.929539] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.936676] device bridge_slave_0 entered promiscuous mode [ 157.961236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.972244] team0: Port device team_slave_1 added [ 158.003042] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.021519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.028743] team0: Port device team_slave_0 added [ 158.051268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.060178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.067872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.096953] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.109016] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.116179] device bridge_slave_1 entered promiscuous mode [ 158.138115] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.150224] team0: Port device team_slave_1 added [ 158.179824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.225592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.234966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.252434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.269888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.300316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.330943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.343131] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.369615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.377466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.410759] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.417128] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.448388] device bridge_slave_0 entered promiscuous mode [ 158.457504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.499861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.506981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.537850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.551692] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.558057] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.565550] device bridge_slave_1 entered promiscuous mode [ 158.594972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.610388] team0: Port device team_slave_0 added [ 158.617674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.653103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.666394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.677912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.687472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.714794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.733792] team0: Port device team_slave_1 added [ 158.791315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.825925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.833356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.841233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.856225] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.888669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.909438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.917232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.959855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.966705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.014316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.029452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.037163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.069358] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.075728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.082359] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.088692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.110769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.126370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 159.136566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.152782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.170305] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.179555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.188520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.276578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.414660] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.421160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.427739] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.434100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.441918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.547695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.563912] team0: Port device team_slave_0 added [ 159.619500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.629691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.686604] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.700076] team0: Port device team_slave_1 added [ 159.730065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.739896] team0: Port device team_slave_0 added [ 159.747146] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.753528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.760128] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.766452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.775177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.803520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.829446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.839484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.875373] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.886960] team0: Port device team_slave_1 added [ 159.903830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.925896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.949974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.003941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.015772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.025387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.041284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 160.054301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.079874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.098088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.130407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.138244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.160037] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.166504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.173139] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.179500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.187023] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.205761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.259852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.266969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.280179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.396538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.408670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.418391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.632528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.640098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.106560] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.112988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.119634] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.125972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.147969] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.365339] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.371873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.378444] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.384823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.410265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.650217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.658764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.942997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.185924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.306364] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.469728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.528434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.622030] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.628189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.636328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.739448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.800213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.869909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.876124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.887126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.978083] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.081757] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.187636] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.194015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.211361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.225869] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.400502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.406738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.420116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.569955] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.759808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.768481] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.979883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.114205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.293251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.473088] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.479462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.487694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.585405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.596286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.609183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.770972] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.885295] 8021q: adding VLAN 0 to HW filter on device team0 23:43:41 executing program 0: timerfd_create(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r0, r1, &(0x7f0000000100), 0x80000001) [ 166.310592] hrtimer: interrupt took 23049 ns 23:43:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x3f}}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) 23:43:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) 23:43:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8090ae81, &(0x7f00000000c0)) 23:43:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = dup2(r2, r3) dup2(r4, r1) [ 166.459807] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 23:43:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)="6d656d6f72790100000016000000ea66571d6ef0133000", 0x26e1, 0x0) write$P9_RWRITE(r0, &(0x7f00000001c0)={0xb}, 0xb) 23:43:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) 23:43:41 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, &(0x7f0000000200)={0x9000000}) 23:43:42 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0x0, 0x0, 0x500, 0x7fffffff, 0x10010, r0}) r1 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000280), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)={'bridge0\x00'}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x0, 0x9}, [{0x0, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07de", [[], [], []]}, 0x3be) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @local}}, 0x2, 0x0, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) 23:43:42 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x2, 0x218, [0x0, 0x200005c0, 0x200005f0, 0x200006f0], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x290) [ 166.869688] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 166.889574] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.896243] bridge0: port 1(bridge_slave_0) entered disabled state 23:43:42 executing program 4: getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f00000004c0)) 23:43:42 executing program 5: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)="5d657468302f00c7c49e9edf8f024054e44831c37c6a044a45048c0b4d841ff3118b5b4cd4e2659f10a25e92c9f94b19aadd4713630690b8f56c444165c26342b80830e42a4a137916060430b83299b8c1f7cd4e5bb044ab48f0b1000bafc80026c6b6c31a4821e1f173488a72b651b00b74609cd05100fe7b7804ff24158733783014fbdd039551a7d2e3703ef22f2877268f79f44fd86955ddaf42c5f9ebce923a78335af3c3b56913e626635bc26c94", 0xfffffffffffffffb) 23:43:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x70e000) 23:43:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_init(0x10, 0x0) 23:43:42 executing program 1: ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=""/9, 0x9}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3}, 0x2c8) 23:43:42 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8) acct(&(0x7f0000000140)='./file0\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 23:43:42 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0xfffffffffffffeaa}, 0xfffffff0) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x9000000, r1}) 23:43:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x14, 0x249e21, 0x8000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) 23:43:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae93, &(0x7f0000000140)={0x1, 0x0, [{}]}) 23:43:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x3, 0x9, 0xdb}) ioctl$EVIOCSKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, "4f019b55a1fe221c8ef0fee629aa80b48fd4d30000000600"}) write$cgroup_int(r1, &(0x7f0000000300), 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 167.474084] *** Guest State *** [ 167.477508] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 167.489674] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 167.499867] CR3 = 0x0000000000000000 [ 167.504849] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 167.508749] kvm: pic: single mode not supported [ 167.512868] kvm: pic: level sensitive irq not supported [ 167.512944] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 167.524857] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 167.536026] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 167.544745] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 167.552544] kvm: pic: level sensitive irq not supported [ 167.552991] kvm: pic: single mode not supported [ 167.557864] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 167.558409] kvm: pic: level sensitive irq not supported [ 167.563179] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 167.590217] kvm: pic: single mode not supported [ 167.590475] kvm: pic: level sensitive irq not supported [ 167.595802] kvm: pic: level sensitive irq not supported [ 167.606823] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 167.621389] kvm: pic: single mode not supported [ 167.622098] kvm: pic: single mode not supported [ 167.627036] kvm: pic: level sensitive irq not supported [ 167.631789] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 167.645700] kvm: pic: level sensitive irq not supported [ 167.645940] kvm: pic: single mode not supported [ 167.651394] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 167.664227] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 167.676025] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 167.684439] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 167.692492] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 167.699179] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 167.707056] Interruptibility = 00000000 ActivityState = 00000000 [ 167.717901] *** Host State *** [ 167.721293] RIP = 0xffffffff81212b2e RSP = 0xffff880192c7f350 [ 167.727832] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 167.734693] FSBase=00007f0b28ab3700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 167.742594] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 167.749993] CR0=0000000080050033 CR3=00000001bf4c2000 CR4=00000000001426f0 [ 167.759863] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 167.770879] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 167.777004] *** Control State *** [ 167.781123] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000cb [ 167.796098] EntryControls=0000d1ff ExitControls=002fefff [ 167.801866] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 167.808832] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 167.820194] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 167.831399] reason=80000021 qualification=0000000000000000 [ 167.837861] IDTVectoring: info=00000000 errcode=00000000 [ 167.844563] TSC Offset = 0xffffffa45f0d7ad0 [ 167.848980] TPR Threshold = 0x00 [ 167.852472] EPT pointer = 0x00000001cb35401e 23:43:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) dup2(r1, r2) fdatasync(r2) 23:43:43 executing program 3: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000140)=""/4096) 23:43:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:43 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') 23:43:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5414, 0x0) 23:43:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = dup2(r2, r3) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r4, r1) 23:43:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/4096) 23:43:43 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5460) [ 168.194862] kvm: pic: level sensitive irq not supported [ 168.195115] kvm: pic: level sensitive irq not supported 23:43:43 executing program 4: rt_sigprocmask(0x0, &(0x7f00000001c0)={0xfffffffffffffff8}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x1f, r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 23:43:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r1, &(0x7f0000003cc0)=@hci, &(0x7f0000003d40)=0x80, 0x0) 23:43:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x8400ae8e, &(0x7f0000000140)) 23:43:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) 23:43:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) [ 168.241447] kvm: pic: level sensitive irq not supported [ 168.267689] ptrace attach of "/root/syz-executor4"[7439] was attempted by "/root/syz-executor4"[7443] 23:43:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)}}], 0x1, 0x20000000) write$P9_RSTATu(r1, &(0x7f0000000340)={0x74, 0x7d, 0x0, {{0x0, 0x5e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4, 'self', 0xc, '-cgroup(eth0', 0x1, '$', 0x1a, '&self[vmnet1#vmnet0&N%eth1'}, 0x1, '('}}, 0x74) 23:43:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1}]}) 23:43:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 23:43:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/95) 23:43:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'sy.'}, &(0x7f00000002c0)="5d657468302f00c7c49e9edf8f024054e44831c37c6a044a45048c0b4d841ff3118b5b4cd4e2659f10a25e92c9f94b19aadd4713630690b8f56c444165c26342b80830e42a4a137916060430b83299b8c1f7cd4e5bb044ab48f0b1000bafc80026c6b6c31a4821e1f173488a72b651b00b74609cd05100fe7b7804ff24158733783014fbdd039551a7d2e3703ef22f2877268f79f44fd86955ddaf42c5f9ebce923a78335af3c3b56913e626635bc26c94", 0x0) 23:43:43 executing program 4: add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000380), &(0x7f00000003c0), 0xfffff, 0xfffffffffffffffc) 23:43:43 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 23:43:43 executing program 0: semctl$GETPID(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000140)=""/4096) 23:43:43 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) acct(&(0x7f0000000140)='./file0\x00') 23:43:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_init(0x5, 0x0) 23:43:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:43 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f0000000000)={0x77359400}, 0x8) acct(&(0x7f0000000140)='./file0\x00') 23:43:43 executing program 0: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) 23:43:43 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xa, 0xa198) 23:43:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0xfffffffffffffffc, &(0x7f0000000000), 0x100002c7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:43 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x20000000001) mlockall(0x3) 23:43:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:44 executing program 0: shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 23:43:44 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0xb9, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040), &(0x7f00000000c0)=""/70}, 0x18) 23:43:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000500)}}, 0x18) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64}, &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000001c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 168.860993] kvm: emulating exchange as write 23:43:44 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0xffffffffffff5ee0, 0x0, 0x500, 0x7fffffff, 0x10010, r2}) r3 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r3, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0xfffffffffffffffd}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x1, 0x9}, [{0x6474e557, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07dea09cf0cd958c80050a56bc8d72a75aa7674066263d669d4472e4e8f615ffb752671cff484320bad0e10ffe6fbf88b2da1dab9abbee054a4d4b7560f46c2bc28281ab71748e5ec912c976aa465f6e10cd1dcdfbd1e1967aad652314fa7b946e0fb376b5048d08", [[], [], []]}, 0x424) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0xffffffffffffffff, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x1ff, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) connect(r4, &(0x7f0000000040)=@generic={0x5, "2ba510141d0f5607eaca1de98d961e3e0a72f2d1b4c0db7781b172d13860f194ce471a13f331bbe0c1a88823eb37e2f0cdb7c0c25d982fadfdaa5f30bf6f117a475b1b2d7c7484a0aba61d0767e5ffa79ebb0507da8af036ee9c03d0128b4f36f0e7cf2d96ce497835e4ebb6f957283a60bc8f946ea57e116d17512f8aae"}, 0x3ed) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x6, &(0x7f0000000000)={0x34e, &(0x7f0000000080)}, 0x625b126675f10a12) 23:43:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 168.958068] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.964756] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.992627] device bridge_slave_1 left promiscuous mode [ 169.006422] bridge0: port 2(bridge_slave_1) entered disabled state 23:43:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 169.050322] device bridge_slave_0 left promiscuous mode [ 169.056431] bridge0: port 1(bridge_slave_0) entered disabled state 23:43:44 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) bind(r0, &(0x7f0000000540)=@ax25={0x3, {"88c999ab3b1401"}}, 0x80) 23:43:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:44 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0xffffffffffff5ee0, 0x0, 0x500, 0x7fffffff, 0x10010, r2}) r3 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r3, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0xfffffffffffffffd}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x1, 0x9}, [{0x6474e557, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07dea09cf0cd958c80050a56bc8d72a75aa7674066263d669d4472e4e8f615ffb752671cff484320bad0e10ffe6fbf88b2da1dab9abbee054a4d4b7560f46c2bc28281ab71748e5ec912c976aa465f6e10cd1dcdfbd1e1967aad652314fa7b946e0fb376b5048d08", [[], [], []]}, 0x424) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0xffffffffffffffff, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x1ff, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) connect(r4, &(0x7f0000000040)=@generic={0x5, "2ba510141d0f5607eaca1de98d961e3e0a72f2d1b4c0db7781b172d13860f194ce471a13f331bbe0c1a88823eb37e2f0cdb7c0c25d982fadfdaa5f30bf6f117a475b1b2d7c7484a0aba61d0767e5ffa79ebb0507da8af036ee9c03d0128b4f36f0e7cf2d96ce497835e4ebb6f957283a60bc8f946ea57e116d17512f8aae"}, 0x3ed) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x6, &(0x7f0000000000)={0x34e, &(0x7f0000000080)}, 0x625b126675f10a12) 23:43:44 executing program 4: 23:43:44 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0xffffffffffff5ee0, 0x0, 0x500, 0x7fffffff, 0x10010, r2}) r3 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r3, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0xfffffffffffffffd}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x1, 0x9}, [{0x6474e557, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07dea09cf0cd958c80050a56bc8d72a75aa7674066263d669d4472e4e8f615ffb752671cff484320bad0e10ffe6fbf88b2da1dab9abbee054a4d4b7560f46c2bc28281ab71748e5ec912c976aa465f6e10cd1dcdfbd1e1967aad652314fa7b946e0fb376b5048d08", [[], [], []]}, 0x424) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0xffffffffffffffff, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x1ff, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) connect(r4, &(0x7f0000000040)=@generic={0x5, "2ba510141d0f5607eaca1de98d961e3e0a72f2d1b4c0db7781b172d13860f194ce471a13f331bbe0c1a88823eb37e2f0cdb7c0c25d982fadfdaa5f30bf6f117a475b1b2d7c7484a0aba61d0767e5ffa79ebb0507da8af036ee9c03d0128b4f36f0e7cf2d96ce497835e4ebb6f957283a60bc8f946ea57e116d17512f8aae"}, 0x3ed) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x6, &(0x7f0000000000)={0x34e, &(0x7f0000000080)}, 0x625b126675f10a12) 23:43:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:43:44 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0xffffffffffff5ee0, 0x0, 0x500, 0x7fffffff, 0x10010, r2}) r3 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r3, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0xfffffffffffffffd}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x1, 0x9}, [{0x6474e557, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07dea09cf0cd958c80050a56bc8d72a75aa7674066263d669d4472e4e8f615ffb752671cff484320bad0e10ffe6fbf88b2da1dab9abbee054a4d4b7560f46c2bc28281ab71748e5ec912c976aa465f6e10cd1dcdfbd1e1967aad652314fa7b946e0fb376b5048d08", [[], [], []]}, 0x424) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0xffffffffffffffff, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x1ff, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) connect(r4, &(0x7f0000000040)=@generic={0x5, "2ba510141d0f5607eaca1de98d961e3e0a72f2d1b4c0db7781b172d13860f194ce471a13f331bbe0c1a88823eb37e2f0cdb7c0c25d982fadfdaa5f30bf6f117a475b1b2d7c7484a0aba61d0767e5ffa79ebb0507da8af036ee9c03d0128b4f36f0e7cf2d96ce497835e4ebb6f957283a60bc8f946ea57e116d17512f8aae"}, 0x3ed) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x6, &(0x7f0000000000)={0x34e, &(0x7f0000000080)}, 0x625b126675f10a12) 23:43:44 executing program 2: 23:43:44 executing program 5: 23:43:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5427, 0x0) 23:43:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000001580), 0x83, 0x0, &(0x7f00000001c0)}) 23:43:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)="6d656d6f72790100000016000000ea66571d6ef0133000", 0x26e1, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)='|', 0x1}], 0x1, 0x0) [ 169.812890] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.819658] bridge0: port 1(bridge_slave_0) entered disabled state 23:43:45 executing program 4: 23:43:45 executing program 5: 23:43:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 169.894025] binder: 7596:7597 unknown command 0 [ 169.910212] binder: 7596:7597 ioctl c0306201 20000000 returned -22 23:43:45 executing program 4: [ 170.108835] device bridge_slave_1 left promiscuous mode [ 170.114688] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.149835] device bridge_slave_0 left promiscuous mode [ 170.155310] bridge0: port 1(bridge_slave_0) entered disabled state 23:43:45 executing program 3: 23:43:45 executing program 5: 23:43:45 executing program 2: 23:43:45 executing program 4: 23:43:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:43:45 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0x358) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@mcast1, @mcast2, @remote, 0x7f, 0xffffffffffff5ee0, 0x0, 0x500, 0x7fffffff, 0x10010, r2}) r3 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r3, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000080)={'bridge0\x00', 0xfffffffffffffffd}) unshare(0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffff953, 0x7fffffff, 0x10000, 0x9, 0x8, 0x3, 0x3, 0x23, 0x10a, 0x38, 0xca, 0x7ff, 0x0, 0x20, 0x1, 0x3f92, 0x1, 0x9}, [{0x6474e557, 0x33, 0x40, 0x9, 0x7, 0x6, 0x100000001, 0x4}], "93f721ca4d5f3663b01a4c26ddd7ffbd7ed19bbea6340003c7e9e9849247f0c529eca360a020a1a148b405dfbc060769eed7e73dc27bcd31532796e39006193a55093ed8193c4ab4df87c0fa381a1a38101078c56aa36d4b6ba496520a28e882d24f9b2c07dea09cf0cd958c80050a56bc8d72a75aa7674066263d669d4472e4e8f615ffb752671cff484320bad0e10ffe6fbf88b2da1dab9abbee054a4d4b7560f46c2bc28281ab71748e5ec912c976aa465f6e10cd1dcdfbd1e1967aad652314fa7b946e0fb376b5048d08", [[], [], []]}, 0x424) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @loopback, @local, 0x0, 0x78, 0x0, 0x100}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0xffffffffffffffff, 0x41, 0x0, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x1ff, @mcast2, 0x941}}, 0x1f, 0x2000008001}, &(0x7f0000000540)=0x90) connect(r4, &(0x7f0000000040)=@generic={0x5, "2ba510141d0f5607eaca1de98d961e3e0a72f2d1b4c0db7781b172d13860f194ce471a13f331bbe0c1a88823eb37e2f0cdb7c0c25d982fadfdaa5f30bf6f117a475b1b2d7c7484a0aba61d0767e5ffa79ebb0507da8af036ee9c03d0128b4f36f0e7cf2d96ce497835e4ebb6f957283a60bc8f946ea57e116d17512f8aae"}, 0x3ed) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x6, &(0x7f0000000000)={0x34e, &(0x7f0000000080)}, 0x625b126675f10a12) 23:43:45 executing program 2: 23:43:45 executing program 4: 23:43:45 executing program 5: 23:43:45 executing program 3: 23:43:45 executing program 0: 23:43:45 executing program 5: 23:43:45 executing program 2: 23:43:45 executing program 4: 23:43:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:45 executing program 3: 23:43:45 executing program 0: 23:43:45 executing program 4: 23:43:45 executing program 2: 23:43:45 executing program 5: 23:43:45 executing program 0: 23:43:45 executing program 4: 23:43:45 executing program 3: 23:43:45 executing program 2: 23:43:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:45 executing program 5: 23:43:45 executing program 3: 23:43:45 executing program 4: 23:43:45 executing program 0: 23:43:45 executing program 2: 23:43:46 executing program 5: 23:43:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(r0, &(0x7f0000000240)={0x7}, 0x7) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000140)={0x4f, 0x6, 0x0, {0x0, 0x0, 0x26, 0x0, "70726f6382626465767d2e253a272347504c6c6f6367726f757076626f786e6574302c2e7d11"}}, 0x4f) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 23:43:46 executing program 4: 23:43:46 executing program 0: 23:43:46 executing program 2: 23:43:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:46 executing program 5: 23:43:46 executing program 4: 23:43:46 executing program 0: 23:43:46 executing program 2: 23:43:46 executing program 3: 23:43:46 executing program 5: 23:43:46 executing program 4: 23:43:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:46 executing program 0: 23:43:46 executing program 2: 23:43:46 executing program 4: 23:43:46 executing program 0: 23:43:46 executing program 3: 23:43:46 executing program 5: 23:43:46 executing program 2: 23:43:46 executing program 4: 23:43:46 executing program 5: 23:43:46 executing program 2: 23:43:46 executing program 0: 23:43:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:46 executing program 3: 23:43:46 executing program 4: 23:43:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f0000000180)="4550d40a1f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 23:43:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'yam0\x00', &(0x7f0000000580)=@ethtool_sfeatures}) 23:43:46 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000000)=[{}], 0x1) 23:43:46 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x0, 0x700, 0x0, 0x0, 0x2a0ffffffff]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 23:43:46 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x61, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x36d}}, 0x0) dup2(r0, r1) [ 171.389060] rdma_op 00000000ad4110ff conn xmit_rdma (null) 23:43:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="8f4978d1af68000000674f0fc71cdb66ba410066b8002066efb8010000000f01d96566420f65d766baf80cb898888c8aef66bafc0cb800000000ef6436468371010066ba2000b046ee400f0666baf80cb8c9c05b85ef66bafc0cb0ddee", 0x5d}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 23:43:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x500000000033) dup2(r0, r1) 23:43:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:46 executing program 0: socketpair$unix(0x1, 0x4010003, 0x0, &(0x7f0000000540)) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bind$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x2c, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x785e4b7e}) fstat(0xffffffffffffffff, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x2) io_setup(0xfffffffe, &(0x7f0000000a40)) socket$inet6(0xa, 0x1000000000002, 0x0) 23:43:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}}, &(0x7f0000000180)="4550d40a1f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) [ 171.518769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.549596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:43:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x40046103, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:43:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 171.592507] QAT: Invalid ioctl [ 171.604916] QAT: Invalid ioctl [ 171.612618] QAT: Invalid ioctl [ 171.619512] QAT: Invalid ioctl [ 171.629558] QAT: Invalid ioctl [ 171.635323] QAT: Invalid ioctl [ 171.638644] QAT: Invalid ioctl 23:43:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='hugetlbfs\x00', 0x10, &(0x7f0000000140)='posix_acl_access\'\x00') r2 = gettid() tkill(r2, 0x2a) 23:43:46 executing program 0: socketpair$unix(0x1, 0x4010003, 0x0, &(0x7f0000000540)) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000940)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bind$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x2c, 0x4, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x785e4b7e}) fstat(0xffffffffffffffff, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x2) io_setup(0xfffffffe, &(0x7f0000000a40)) socket$inet6(0xa, 0x1000000000002, 0x0) [ 171.645102] QAT: Invalid ioctl [ 171.648435] QAT: Invalid ioctl [ 171.652122] QAT: Invalid ioctl [ 171.657229] QAT: Invalid ioctl [ 171.661083] QAT: Invalid ioctl [ 171.664740] QAT: Invalid ioctl [ 171.668743] QAT: failed to copy from user. [ 171.674292] QAT: Invalid ioctl [ 171.678287] QAT: Invalid ioctl 23:43:46 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x0, 0x700]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) [ 171.692656] QAT: Invalid ioctl [ 171.696179] QAT: Invalid ioctl 23:43:46 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000180), 0x500000000033) [ 171.726210] QAT: Invalid ioctl [ 171.739598] QAT: Invalid ioctl [ 171.746364] QAT: Invalid ioctl [ 171.754834] QAT: Invalid ioctl [ 171.761782] QAT: Invalid ioctl [ 171.768978] QAT: Invalid ioctl [ 171.788268] QAT: Invalid ioctl [ 171.808120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.809887] QAT: Invalid ioctl 23:43:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='hugetlbfs\x00', 0x10, &(0x7f0000000140)='posix_acl_access\'\x00') tkill(0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:43:47 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:47 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x90, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000f5bd000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000053000000000000000000"]}, 0x108) 23:43:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4c00) 23:43:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x40046103, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0xf000, 0x3000, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0xfff}, {0x0, 0x4000, 0xd, 0x7, 0x8894, 0x0, 0x1ff, 0x3, 0x0, 0x52b, 0xfffffffffffffffd, 0x8000}, {0xf000, 0x0, 0x1b, 0x0, 0x8af9, 0x401, 0x7fff, 0x8, 0xc6, 0x6, 0x1}, {0x6000, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8, 0x3, 0x1f2b, 0x0, 0x4563}, {0x100000, 0x3000, 0x0, 0x9, 0x0, 0x1, 0xf9, 0x8, 0x1, 0x3}, {0x17000, 0x0, 0x0, 0x5841, 0x200, 0xb40, 0x6, 0x0, 0xffffffffffffb55b, 0x6}, {0x100000, 0x4, 0xf, 0x5, 0x47a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x7c}, {0x1001, 0x3002, 0x13, 0x5, 0x2, 0x2140a847, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x10000, 0xf000}, {0x0, 0x1000}, 0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1e82, 0x100, 0x7]}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 23:43:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x40046103, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0xf000, 0x3000, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0xfff}, {0x0, 0x4000, 0xd, 0x7, 0x8894, 0x0, 0x1ff, 0x3, 0x0, 0x52b, 0xfffffffffffffffd, 0x8000}, {0xf000, 0x0, 0x1b, 0x0, 0x8af9, 0x401, 0x7fff, 0x8, 0xc6, 0x6, 0x1}, {0x6000, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8, 0x3, 0x1f2b, 0x0, 0x4563}, {0x100000, 0x3000, 0x0, 0x9, 0x0, 0x1, 0xf9, 0x8, 0x1, 0x3}, {0x17000, 0x0, 0x0, 0x5841, 0x200, 0xb40, 0x6, 0x0, 0xffffffffffffb55b, 0x6}, {0x100000, 0x4, 0xf, 0x5, 0x47a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x7c}, {0x1001, 0x3002, 0x13, 0x5, 0x2, 0x2140a847, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x10000, 0xf000}, {0x0, 0x1000}, 0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1e82, 0x100, 0x7]}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 23:43:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x40046103, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0xf000, 0x3000, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0xfff}, {0x0, 0x4000, 0xd, 0x7, 0x8894, 0x0, 0x1ff, 0x3, 0x0, 0x52b, 0xfffffffffffffffd, 0x8000}, {0xf000, 0x0, 0x1b, 0x0, 0x8af9, 0x401, 0x7fff, 0x8, 0xc6, 0x6, 0x1}, {0x6000, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8, 0x3, 0x1f2b, 0x0, 0x4563}, {0x100000, 0x3000, 0x0, 0x9, 0x0, 0x1, 0xf9, 0x8, 0x1, 0x3}, {0x17000, 0x0, 0x0, 0x5841, 0x200, 0xb40, 0x6, 0x0, 0xffffffffffffb55b, 0x6}, {0x100000, 0x4, 0xf, 0x5, 0x47a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x7c}, {0x1001, 0x3002, 0x13, 0x5, 0x2, 0x2140a847, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x10000, 0xf000}, {0x0, 0x1000}, 0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1e82, 0x100, 0x7]}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) [ 171.943486] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 171.955418] QAT: failed to copy from user. [ 171.970317] QAT: Invalid ioctl [ 171.976364] QAT: Invalid ioctl [ 171.988274] QAT: Invalid ioctl 23:43:47 executing program 4: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) 23:43:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) pipe2(&(0x7f0000000240), 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000280)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000200)) 23:43:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180)="a9", 0x1, 0xfffffffffffffffd) [ 172.064256] QAT: failed to copy from user. [ 172.080383] QAT: Invalid ioctl [ 172.091611] QAT: failed to copy from user. [ 172.106267] QAT: Invalid ioctl 23:43:47 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000780)="bf", 0x1, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@local, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) [ 172.126265] QAT: Invalid ioctl [ 172.143738] QAT: Invalid ioctl 23:43:47 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000780)="bf", 0x1, r0) 23:43:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 23:43:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='GPL^\x00', 0x0) 23:43:47 executing program 3: 23:43:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="da"], 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$key(r2, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10000000020000000000000000000000b9ce04b9c1b58befa03465fb952af386d18f0a5975b8ec8b36793c780318178026f1d123dea4e0e2b33540811ebc4c01afee8ac873718333bc373f000000ac"], 0x4f}}, 0x0) 23:43:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x2}, 0x20) 23:43:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 23:43:47 executing program 4: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@dev}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1\x00', &(0x7f0000000000)=@ethtool_sset_info={0xf}}) close(r0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 23:43:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 23:43:48 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x8, 0x0) 23:43:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 23:43:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x34004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0xf0ffff}}, 0x1c}}, 0x0) 23:43:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x10001, 0x4) sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 23:43:48 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:48 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488dd2") setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x10, 0xbd, &(0x7f0000000100)="bc15a54b0e46cdc214c494cbfc7e04c2", &(0x7f0000000380)=""/189, 0x869c}, 0x28) 23:43:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018200000000000002169000018000000000000000000"], 0xffffffffffffffff, 0x1a, 0x0, 0x1}, 0x20) [ 172.974723] tls_set_device_offload: netdev not found [ 173.009483] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 23:43:48 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) 23:43:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x34004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}}, 0x0) 23:43:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 23:43:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) 23:43:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:48 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f00000003c0)="153f6234488dd25d766070") socket$inet(0x28, 0x2, 0x2) 23:43:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000002700), 0x0, &(0x7f0000002740)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000002980)) 23:43:48 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:48 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x689, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) [ 173.265359] tls_set_device_offload: netdev not found 23:43:48 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) 23:43:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000600)={@remote, @ipv4={[], [], @multicast1}, @remote}) 23:43:48 executing program 0: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=r1) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000060107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 173.418433] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 173.474144] pic_ioport_write: 21 callbacks suppressed [ 173.474148] kvm: pic: level sensitive irq not supported [ 173.512428] kvm: pic: level sensitive irq not supported [ 173.514320] kvm: pic: level sensitive irq not supported 23:43:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf617732743e397b89f26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc0c0583b, &(0x7f0000000000)) 23:43:48 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) 23:43:48 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 23:43:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140), 0x1c) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 23:43:48 executing program 4: r0 = socket(0x10, 0x20001000000003, 0x0) write(r0, &(0x7f0000000000)="220000001400070500e80000000003000208030001000000080002004100fff0f055", 0x22) [ 173.530019] kvm: pic: level sensitive irq not supported [ 173.549790] kvm: pic: level sensitive irq not supported [ 173.560426] kvm: pic: level sensitive irq not supported 23:43:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001440)='lp\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x389756b1353683f6, 0x120, 0x0, 0xffffffffffffffeb) 23:43:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 173.603307] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'. 23:43:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1, &(0x7f00000002c0)=""/73, 0x49}}], 0x1, 0x0, 0x0) 23:43:48 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) accept(r1, 0x0, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{}], 0x1, 0x5c80) 23:43:48 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in=@remote}}, 0x1b4) [ 173.679833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:43:48 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x200400000040011, @rand_addr, 0x0, 0x0, "736800000001e0000000000000000200"}, 0x2c) [ 173.743147] kvm: pic: level sensitive irq not supported [ 173.743403] kvm: pic: level sensitive irq not supported [ 173.768820] kvm: pic: level sensitive irq not supported [ 173.769150] kvm: pic: level sensitive irq not supported 23:43:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) sendto$inet(r1, &(0x7f00000000c0)="2be1cd86f7b0ac68ee73f8abb49d20c858549a97027c789d02c81d4bc76d13644086b271d185edefed8e43261095a7ea7d72a2b6b0bfa6b55ddaa23260e954643bc01b6d0531e43197a81b53763f5bd5903dabc11a65ccfcad6e377e8bbd87dfb9a9fadff50bd2c71915d57eb071d4a4fb6591ff13a3c66f1c3ec9c1fe28c66ea3fdeb25db2e20413f90c5d6682d2e43a5de32415fce795422ab0a2f99947a973cf7c959425c", 0xa6, 0x80, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="06b8853fdd34d22cb0601926b741d1de619ff835988efb2976ab8b43abe1bf885d38a418ac7bd4ebe7f1ed356192faa3af453b42bd78adee928b108df9959b77add153a34a1bb190ab3c74b476af01826a3217359f3e09c7f0410779fdba1ed9f2af2a572a55c8da88866b0b517f395390f17e96eef447b18812f676be6f9a1a0fb2af8a9cfe38e52c6d5a2dc633add5ec60b539240fa318d7847d5d", 0x9c, 0x4000014, &(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0xfe}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000180), 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) 23:43:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 23:43:49 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x4b33, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x2e, &(0x7f00000002c0), 0x609000000000000}}], 0x1, 0x0, 0x0) 23:43:49 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) 23:43:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac00)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000003c0)="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", 0x2c3}], 0x1, &(0x7f0000001440)=[{0xc8, 0x0, 0x6, "d6e64f1661e6d5f05ae7780b79c78b29e7b849caa8a751b8b83d26103a84130e76ae98174b59af23bf4a8cd9f77520aef6cb848c0212a6d2ed6171d4ebd163ebdb6f67cd6ea0e17f723d37f4f2de24b1b1b9a96d1634af543a947a258c87cca38d6ac2b26295c7780cc9a5545a7304817a0852ed4c2a7d99c2c140832af7a166c4740082f9fa430686b7ee702dc4272a987fd7df35c23f1bb14f624747c468f396fe0e0d7c6940d8357d7745391b48412c41689e99cc"}], 0xc8, 0x48000}, 0x401}], 0x1, 0x0) 23:43:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 23:43:49 executing program 3: 23:43:49 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001440)='lp\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x389756b1353683f6, 0x120, 0x0, 0xffffffffffffffeb) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000013c0)}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) 23:43:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f0000000080)={@loopback, @dev, @loopback}) 23:43:49 executing program 0: 23:43:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) clone(0x100002102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x2000000000000304}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) clone(0x4004000, &(0x7f0000000040)="19277775f5eb2d2fb12cd9f8d183125d225022d927a91c68f0", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="9bcc1be819077b2fa9a1c6e5bf03390f7ee92fa637803729d10bccacbbe87070cc08891a73bd87008d191bb257eb1d98ad350b071392001cb1cca21972e50cb0331307ea2051f6668e8de12ee5e4f44ed18f477b644bd84ae895b6fbebe4fb20365db865383d89f6249729ab7ec4350a73") [ 174.605095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:43:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) [ 174.734745] kauditd_printk_skb: 1 callbacks suppressed [ 174.734759] audit: type=1326 audit(1538869429.887:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8083 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 174.778434] audit: type=1326 audit(1538869429.887:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8083 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 174.799898] audit: type=1326 audit(1538869429.887:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8083 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:50 executing program 5: 23:43:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'rose0\x00', {0x2, 0x100}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) 23:43:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140), 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000040)="8a", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 23:43:50 executing program 4: 23:43:52 executing program 5: 23:43:52 executing program 4: 23:43:52 executing program 3: 23:43:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:52 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:52 executing program 0: 23:43:52 executing program 3: 23:43:52 executing program 0: 23:43:52 executing program 5: 23:43:52 executing program 4: 23:43:52 executing program 0: 23:43:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:52 executing program 4: 23:43:52 executing program 3: socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:43:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000200)="04", 0x1) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000440)}) 23:43:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 177.801632] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 177.813568] audit: type=1326 audit(1538869432.967:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8140 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 177.858209] binder: 8165:8167 ioctl c0306201 20000000 returned -14 [ 177.868472] audit: type=1326 audit(1538869432.967:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8140 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x0 [ 177.912465] audit: type=1326 audit(1538869432.987:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8140 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:55 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:55 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0xfcb9, &(0x7f00000001c0), 0x3, &(0x7f00000024c0)=""/206, 0xce}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x8000a0) 23:43:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000200)="04", 0x1) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000440)}) 23:43:55 executing program 3: socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:43:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:55 executing program 0: syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x405) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200000004000000000000003800000000000000000000000000200000000000000000000029f221b68b9fa00000000000000000000000"], 0x47) 23:43:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x36d}}, 0x0) [ 180.690692] binder: 8182:8183 ioctl c0306201 20000000 returned -14 23:43:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:55 executing program 3: socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:43:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000200)="04", 0x1) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000440)}) 23:43:55 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 180.783291] audit: type=1326 audit(1538869435.937:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8194 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:56 executing program 3: socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000092000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 23:43:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000200)="04", 0x1) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000440)}) [ 180.837441] binder: 8205:8207 ioctl c0306201 20000000 returned -14 [ 180.847454] audit: type=1326 audit(1538869435.967:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8194 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 180.880973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.909330] audit: type=1326 audit(1538869436.047:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8211 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team_slave_0\x00', 0x1}) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 23:43:56 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 180.950517] audit: type=1326 audit(1538869436.097:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8211 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 181.011542] binder: 8220:8226 ioctl c0306201 20000000 returned -14 23:43:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) [ 181.055432] audit: type=1326 audit(1538869436.207:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8225 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 181.081388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.117703] audit: type=1326 audit(1538869436.257:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8225 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 181.168273] input: syz1 as /devices/virtual/input/input5 [ 181.178088] input: syz1 as /devices/virtual/input/input6 23:43:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:56 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) read(r0, &(0x7f0000000340)=""/143, 0xfffffc68) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:43:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'team_slave_0\x00', 0x1}) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 23:43:56 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000080)) [ 181.720122] input: syz1 as /devices/virtual/input/input7 [ 181.747933] audit: type=1326 audit(1538869436.897:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8256 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:43:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x4, 0x2ed6, 0x2, 0x0, 0x1, 0x0, [0x4]}, 0x2c) 23:43:57 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 181.799750] audit: type=1326 audit(1538869436.947:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8256 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 181.820773] input: syz1 as /devices/virtual/input/input8 23:43:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7c, &(0x7f0000000180), &(0x7f00000001c0)=0x1000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000780), &(0x7f0000000680)=0x76) [ 181.909953] audit: type=1326 audit(1538869437.067:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8273 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 181.962262] input: syz1 as /devices/virtual/input/input9 23:43:57 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 182.004756] input: syz1 as /devices/virtual/input/input10 [ 182.015286] audit: type=1326 audit(1538869437.107:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8273 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 182.040179] input: syz1 as /devices/virtual/input/input11 23:43:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x80) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r3, &(0x7f0000000080), 0xfffffffffffffcd6) 23:43:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7c, &(0x7f0000000180), &(0x7f00000001c0)=0x1000) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000780), &(0x7f0000000680)=0x76) 23:43:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x4, 0x2ed6, 0x1, 0x0, 0x1}, 0x2c) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 182.137865] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:43:57 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:43:57 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x81785501, &(0x7f0000000080)={{0x5, 0x0, 0x8, 0x0, 'syz1\x00'}, 0x0, 0x30000202, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040)}) 23:43:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 182.326340] input: syz1 as /devices/virtual/input/input12 23:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'ifb0\x00', {0x2, 0x4e23, @multicast1}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r3, 0x7}, 0x8) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0xc0242) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="dbab09cbf41babe50bc37531a1cd09bfa0c007000000f247c861c8da70d4b8ef8a4d6ff939fd278009ba58e4aba843659ae916d92a3eef09f9fd8ff69bcb92079dff52eca2f4092659dba15f9d923751b842520cfdac91e18c62b08bab3216cb3be70c2cb738e54be8982c69429815bc07e32c0b2fddbe27e0b6398fce2c3e5b38c03bf51bf23ce02ac20c7e288ea9805791a500"], 0x94) prctl$setmm(0x23, 0x7, &(0x7f00002a0000/0x1000)=nil) 23:43:57 executing program 4: syslog(0x3, &(0x7f00000002c0)=""/22, 0x16) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 182.386067] input: syz1 as /devices/virtual/input/input13 23:43:57 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:43:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000540)=0x24) 23:43:57 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'ifb0\x00', {0x2, 0x4e23, @multicast1}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r3, 0x7}, 0x8) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0xc0242) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="dbab09cbf41babe50bc37531a1cd09bfa0c007000000f247c861c8da70d4b8ef8a4d6ff939fd278009ba58e4aba843659ae916d92a3eef09f9fd8ff69bcb92079dff52eca2f4092659dba15f9d923751b842520cfdac91e18c62b08bab3216cb3be70c2cb738e54be8982c69429815bc07e32c0b2fddbe27e0b6398fce2c3e5b38c03bf51bf23ce02ac20c7e288ea9805791a500"], 0x94) prctl$setmm(0x23, 0x7, &(0x7f00002a0000/0x1000)=nil) [ 182.596913] input: syz1 as /devices/virtual/input/input14 23:43:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000500)='asymmetric\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x80) r4 = socket(0x200000000000011, 0x0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) bind$packet(r4, &(0x7f0000000000), 0x14) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write$evdev(r3, &(0x7f0000000080), 0xfffffffffffffcd6) fcntl$getflags(r0, 0xb) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x7}, 0x7) 23:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:43:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:57 executing program 2: clone(0x0, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:57 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) [ 182.733255] input: syz1 as /devices/virtual/input/input16 23:43:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "51390af9d7ba8cee7c538a00037f7c341f2839df3f7ac695a6a702fe74076b72037a3b39c273a66a38d5d4492ff7960824d95c893c40bf7b94c21f5042d2497c6d003348fc27d3bcab41f6fe3edd913c"}, 0xd8) 23:43:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 182.871755] input: syz1 as /devices/virtual/input/input17 23:43:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000500)='asymmetric\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000001040), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x80) r4 = socket(0x200000000000011, 0x0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) bind$packet(r4, &(0x7f0000000000), 0x14) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write$evdev(r3, &(0x7f0000000080), 0xfffffffffffffcd6) fcntl$getflags(r0, 0xb) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x7}, 0x7) 23:43:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) [ 182.984017] input: syz1 as /devices/virtual/input/input18 23:43:58 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x0, {0x2, 0x0, @rand_addr}, 'bridge0\x00'}) 23:43:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x8000) close(r0) 23:43:58 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) 23:43:58 executing program 2: clone(0x0, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000015, 0x805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'team_slave_0\x00', 0x1}) 23:43:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:58 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) getpeername(r0, &(0x7f0000000200)=@ethernet={0x0, @remote}, &(0x7f0000000040)=0x80) 23:43:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x8000) close(r0) [ 183.156746] input: syz1 as /devices/virtual/input/input19 [ 183.183723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 23:43:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 183.214834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:43:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x8000) close(r0) 23:43:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 23:43:58 executing program 2: clone(0x0, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:58 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) getpeername(r0, &(0x7f0000000200)=@ethernet={0x0, @remote}, &(0x7f0000000040)=0x80) [ 183.288273] input: syz1 as /devices/virtual/input/input20 23:43:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000000)) 23:43:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8912, &(0x7f0000000780)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xc003, 0x3f7, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 23:43:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) 23:43:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) [ 183.466681] input: syz1 as /devices/virtual/input/input21 23:43:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f0000000280)="240000001a0099f0003be90000ed190e020808160000000031ba0080080001007f196be0", 0x24) 23:43:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x2, 0x3181, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x20) 23:43:58 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 183.622775] input: syz1 as /devices/virtual/input/input22 23:43:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 23:43:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x4008ae61, &(0x7f0000000080)) 23:43:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:43:59 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 183.896255] input: syz1 as /devices/virtual/input/input23 23:43:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x21, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, "51390af9d7ba8cee7c538a00037f7c341f2839df3f7ac695a6a702fe74076b72037a3b39c273a66a38d5d4492ff7960824d95c893c40bf7b94c21f5042d2497c6d003348fc27d3bcab41f6fe3edd913c"}, 0xd8) [ 183.977788] input: syz1 as /devices/virtual/input/input24 23:43:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 23:43:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:43:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x2, 0x3181, 0x1, 0x800000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)) 23:43:59 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0xfffffffffffffd32) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000002c0)={0x10, 0x0, 0x1}, 0x10) chmod(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 23:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:59 executing program 4: r0 = memfd_create(&(0x7f0000000100)='/wlan0\x00', 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x26d, &(0x7f00000001c0)=""/39, &(0x7f00000000c0)=0x12) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x75, 0x7f, 0x8}, &(0x7f00000001c0)=0x98) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffffd, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket(0x840000000015, 0x805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) unlinkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file1/file0\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)) 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:43:59 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x0, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 184.363099] input: syz1 as /devices/virtual/input/input25 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:43:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) close(r0) 23:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:43:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:43:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0xc00000000002100, 0x8000fffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) [ 184.551566] input: syz1 as /devices/virtual/input/input26 23:43:59 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 184.650594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:44:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x2ed3, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000200)=""/160}, 0x18) 23:44:00 executing program 4: r0 = memfd_create(&(0x7f0000000100)='/wlan0\x00', 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x26d, &(0x7f00000001c0)=""/39, &(0x7f00000000c0)=0x12) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x75, 0x7f, 0x8}, &(0x7f00000001c0)=0x98) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffffd, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = socket(0x840000000015, 0x805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) unlinkat(0xffffffffffffffff, &(0x7f0000000480)='./file0/file1/file0\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)) 23:44:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x1) r1 = socket(0x10, 0x802, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000740)={0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}]}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) getsockname$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000980)='numa_maps\x00') ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00'}) 23:44:00 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) [ 185.224830] input: syz1 as /devices/virtual/input/input28 23:44:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:00 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) [ 185.353688] input: syz1 as /devices/virtual/input/input29 23:44:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 23:44:00 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:00 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) 23:44:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:01 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000003, 0x20400000087) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001300)={"66690674657200000000000000000000000000000000000000deffffff00", 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000001280), 0x0, [{}]}, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 23:44:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:01 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:01 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 23:44:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000002000006a0a00fe000000008500000049000000b7000000000000009500000000000000"], &(0x7f0000000100)="47504cd2"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x38, &(0x7f0000000140)="91365759aa3d67db8af58219d82c", &(0x7f0000000280)=""/56, 0x80000000003b99}, 0x28) syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x10000, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) socket$inet6_sctp(0xa, 0x0, 0x84) 23:44:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 186.164742] input: syz1 as /devices/virtual/input/input30 23:44:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) ioctl$void(r1, 0x5451) 23:44:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000940)) io_setup(0x101, &(0x7f0000000040)) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000080)=""/111, 0x6f}, 0x0) [ 186.292327] input: syz1 as /devices/virtual/input/input31 23:44:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:02 executing program 0: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) 23:44:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00007ed000), 0x0, &(0x7f00000002c0), 0x1b7}}], 0x1, 0x0) 23:44:02 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:02 executing program 0: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) 23:44:02 executing program 4: socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x3d9c, {{0x2, 0x4e22, @remote}}}, 0x88) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 23:44:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 187.149166] input: syz1 as /devices/virtual/input/input32 23:44:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:02 executing program 0: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) 23:44:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 187.280700] input: syz1 as /devices/virtual/input/input33 [ 187.287628] kauditd_printk_skb: 9 callbacks suppressed [ 187.287640] audit: type=1326 audit(1538869442.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8712 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 187.355929] audit: type=1326 audit(1538869442.437:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8712 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 187.383361] audit: type=1326 audit(1538869442.437:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8712 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:03 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='changehat Ax0000000000\x00\x00mhat '], 0x1) 23:44:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:05 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 23:44:05 executing program 1: socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:05 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f0000000040)={0x0, r1}) 23:44:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:05 executing program 1: socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:05 executing program 0: [ 190.178033] input: syz1 as /devices/virtual/input/input34 23:44:05 executing program 4: 23:44:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:05 executing program 1: socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 190.317843] audit: type=1326 audit(1538869445.467:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8778 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 190.348408] input: syz1 as /devices/virtual/input/input35 [ 190.354435] audit: type=1326 audit(1538869445.467:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8778 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x0 [ 190.382164] audit: type=1326 audit(1538869445.467:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8778 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:08 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:08 executing program 0: 23:44:08 executing program 4: 23:44:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x5]}, 0x2c) 23:44:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000300), 0x0) [ 193.223671] input: syz1 as /devices/virtual/input/input36 23:44:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:08 executing program 0: r0 = memfd_create(&(0x7f0000000080)='#posix_acl_access\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x8, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 23:44:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 23:44:08 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 193.367330] audit: type=1326 audit(1538869448.517:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8814 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 193.424242] audit: type=1326 audit(1538869448.547:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8814 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:11 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 23:44:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x7f, 0x8, 0xffffffffffffffff, 0x5}, 0x2c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000f80)=@sco, 0x80}}], 0x1, 0x10000, 0x0) 23:44:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:11 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x29, &(0x7f00000002c0), &(0x7f00000000c0)=0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 23:44:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 196.288536] input: syz1 as /devices/virtual/input/input37 23:44:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:11 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 196.399484] audit: type=1326 audit(1538869451.547:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8853 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 196.422329] input: syz1 as /devices/virtual/input/input38 [ 196.436843] input: syz1 as /devices/virtual/input/input39 23:44:11 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 196.445001] audit: type=1326 audit(1538869451.547:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8853 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x0 [ 196.472923] audit: type=1326 audit(1538869451.577:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8853 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:14 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 199.302542] input: syz1 as /devices/virtual/input/input40 [ 199.332128] input: syz1 as /devices/virtual/input/input41 [ 199.338467] input: syz1 as /devices/virtual/input/input42 23:44:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 199.444312] audit: type=1326 audit(1538869454.597:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8899 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 199.488886] input: syz1 as /devices/virtual/input/input44 [ 199.527454] input: syz1 as /devices/virtual/input/input45 [ 199.540145] audit: type=1326 audit(1538869454.597:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8899 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:17 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 202.351838] input: syz1 as /devices/virtual/input/input46 [ 202.384911] pic_ioport_write: 2 callbacks suppressed [ 202.384916] kvm: pic: level sensitive irq not supported 23:44:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:17 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:17 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 202.392406] kvm: pic: level sensitive irq not supported [ 202.397243] kvm: pic: level sensitive irq not supported [ 202.403083] kvm: pic: level sensitive irq not supported [ 202.421654] kvm: pic: level sensitive irq not supported [ 202.432556] kvm: pic: level sensitive irq not supported 23:44:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 202.469823] audit: type=1326 audit(1538869457.627:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8943 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 202.547939] audit: type=1326 audit(1538869457.627:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8943 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 202.587438] input: syz1 as /devices/virtual/input/input48 [ 202.596725] audit: type=1326 audit(1538869457.667:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8943 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:20 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:20 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:20 executing program 4 (fault-call:7 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:20 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:44:20 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x81785501, &(0x7f0000001000)) [ 205.413308] FAULT_INJECTION: forcing a failure. [ 205.413308] name failslab, interval 1, probability 0, space 0, times 1 [ 205.449605] CPU: 1 PID: 8981 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 23:44:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc020660b, &(0x7f0000001000)) [ 205.456915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.456921] Call Trace: [ 205.456953] dump_stack+0x1c4/0x2b4 [ 205.472495] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.477701] should_fail.cold.4+0xa/0x17 [ 205.481766] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.481785] ? mark_held_locks+0x130/0x130 [ 205.491089] ? lock_downgrade+0x900/0x900 [ 205.495273] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 205.501076] ? __wake_up_common_lock+0x1d0/0x330 [ 205.505847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:44:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 23:44:20 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 205.511394] ? check_preemption_disabled+0x48/0x200 [ 205.516426] ? fs_reclaim_acquire+0x20/0x20 [ 205.520753] ? lock_downgrade+0x900/0x900 [ 205.524995] ? ___might_sleep+0x1ed/0x300 [ 205.529160] ? arch_local_save_flags+0x40/0x40 [ 205.533745] ? mark_held_locks+0x130/0x130 [ 205.538008] __should_failslab+0x124/0x180 [ 205.542252] should_failslab+0x9/0x14 [ 205.546059] kmem_cache_alloc+0x2be/0x730 [ 205.550223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.555763] ? kvm_pfn_to_page+0x7a/0xa0 23:44:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) [ 205.555787] mmu_topup_memory_caches+0xf7/0x390 [ 205.564487] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.570032] ? kvm_apic_has_interrupt+0xe9/0x230 [ 205.574808] kvm_mmu_load+0x21/0xfa0 [ 205.574827] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 205.583530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.589418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.594969] vcpu_enter_guest+0x3dbe/0x6380 [ 205.599309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.604873] ? check_preemption_disabled+0x48/0x200 [ 205.609899] ? emulator_read_emulated+0x50/0x50 [ 205.614577] ? perf_trace_lock+0x7a0/0x7a0 [ 205.618932] ? debug_smp_processor_id+0x1c/0x20 [ 205.623602] ? perf_trace_lock_acquire+0x15b/0x800 [ 205.628533] ? vmx_write_tsc_offset+0x680/0x680 [ 205.633203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.638751] ? check_preemption_disabled+0x48/0x200 [ 205.638769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.649297] ? check_preemption_disabled+0x48/0x200 [ 205.649313] ? perf_trace_lock_acquire+0x15b/0x800 [ 205.649332] ? lock_acquire+0x1ed/0x520 [ 205.663220] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 205.668237] ? lock_release+0x970/0x970 [ 205.672211] ? kvm_gen_update_masterclock+0x350/0x350 [ 205.677388] ? kvm_arch_dev_ioctl+0x630/0x630 [ 205.681872] ? preempt_notifier_dec+0x20/0x20 [ 205.686369] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 205.691223] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 205.696255] kvm_vcpu_ioctl+0x72b/0x1150 [ 205.700323] ? kvm_vcpu_block+0x1030/0x1030 [ 205.704639] ? __fget+0x4aa/0x740 [ 205.708211] ? __f_unlock_pos+0x19/0x20 [ 205.712338] ? __fget+0x4d1/0x740 [ 205.715785] ? ksys_dup3+0x680/0x680 [ 205.719494] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 205.724464] ? fsnotify+0xaae/0x12f0 [ 205.728175] ? kvm_vcpu_block+0x1030/0x1030 [ 205.732496] do_vfs_ioctl+0x1de/0x1720 [ 205.736377] ? fsnotify_first_mark+0x350/0x350 [ 205.741137] ? __fsnotify_parent+0xcc/0x420 [ 205.745445] ? ioctl_preallocate+0x300/0x300 [ 205.749838] ? __fget_light+0x2e9/0x430 [ 205.753798] ? fget_raw+0x20/0x20 [ 205.757243] ? __sb_end_write+0xd9/0x110 [ 205.761298] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.766821] ? fput+0x130/0x1a0 [ 205.770089] ? ksys_write+0x1ae/0x260 [ 205.773875] ? security_file_ioctl+0x94/0xc0 [ 205.778276] ksys_ioctl+0xa9/0xd0 [ 205.781724] __x64_sys_ioctl+0x73/0xb0 [ 205.785600] do_syscall_64+0x1b9/0x820 [ 205.789476] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 205.794824] ? syscall_return_slowpath+0x5e0/0x5e0 [ 205.799895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.804736] ? trace_hardirqs_on_caller+0x310/0x310 [ 205.809791] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 205.814853] ? prepare_exit_to_usermode+0x291/0x3b0 [ 205.819864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.824886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.830063] RIP: 0033:0x457579 [ 205.833533] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.852417] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.860210] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 205.867460] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.874715] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 205.881969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 205.889227] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 [ 205.946601] audit: type=1326 audit(1538869461.097:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8986 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 205.967823] audit: type=1326 audit(1538869461.097:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8986 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 205.988828] audit: type=1326 audit(1538869461.097:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8986 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:23 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:23 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc00455d0, &(0x7f0000001000)) 23:44:23 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 23:44:23 executing program 4 (fault-call:7 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:23 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:23 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 23:44:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f0000001000)) 23:44:23 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 208.482719] FAULT_INJECTION: forcing a failure. [ 208.482719] name failslab, interval 1, probability 0, space 0, times 0 [ 208.533961] CPU: 1 PID: 9018 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 208.541303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.550750] Call Trace: [ 208.553359] dump_stack+0x1c4/0x2b4 [ 208.556999] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.562211] ? __kernel_text_address+0xd/0x40 [ 208.566719] ? unwind_get_return_address+0x61/0xa0 [ 208.571660] should_fail.cold.4+0xa/0x17 [ 208.575723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.580826] ? save_stack+0xa9/0xd0 23:44:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 208.580840] ? kasan_kmalloc+0xc7/0xe0 [ 208.580851] ? kasan_slab_alloc+0x12/0x20 [ 208.580869] ? kmem_cache_alloc+0x12e/0x730 [ 208.592498] ? mmu_topup_memory_caches+0xf7/0x390 [ 208.592512] ? kvm_mmu_load+0x21/0xfa0 [ 208.605521] ? vcpu_enter_guest+0x3dbe/0x6380 [ 208.610011] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 208.610025] ? do_vfs_ioctl+0x1de/0x1720 [ 208.610044] ? ksys_ioctl+0xa9/0xd0 [ 208.610054] ? __x64_sys_ioctl+0x73/0xb0 [ 208.610071] ? do_syscall_64+0x1b9/0x820 [ 208.630844] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.636214] ? percpu_ref_put_many+0x11c/0x260 [ 208.640801] ? lock_downgrade+0x900/0x900 [ 208.644958] ? lock_release+0x970/0x970 [ 208.648935] ? fs_reclaim_acquire+0x20/0x20 [ 208.648953] ? lock_downgrade+0x900/0x900 [ 208.657392] ? lock_downgrade+0x900/0x900 [ 208.657423] ? ___might_sleep+0x1ed/0x300 [ 208.665685] ? arch_local_save_flags+0x40/0x40 [ 208.670291] ? percpu_ref_put_many+0x13e/0x260 [ 208.674887] ? trace_hardirqs_on+0xbd/0x310 [ 208.679227] __should_failslab+0x124/0x180 [ 208.683460] should_failslab+0x9/0x14 [ 208.687246] kmem_cache_alloc+0x2be/0x730 [ 208.691380] ? mmu_topup_memory_caches+0xf7/0x390 [ 208.696206] mmu_topup_memory_caches+0xf7/0x390 [ 208.700857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.706531] kvm_mmu_load+0x21/0xfa0 [ 208.710240] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 208.715158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.720693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.726221] vcpu_enter_guest+0x3dbe/0x6380 [ 208.730532] ? preempt_notifier_register+0x200/0x200 [ 208.735623] ? __switch_to_asm+0x34/0x70 [ 208.739678] ? __switch_to_asm+0x34/0x70 [ 208.743733] ? emulator_read_emulated+0x50/0x50 [ 208.748383] ? __switch_to_asm+0x34/0x70 [ 208.752644] ? __switch_to_asm+0x34/0x70 [ 208.756693] ? __switch_to_asm+0x40/0x70 [ 208.760741] ? __schedule+0x874/0x1ed0 [ 208.764612] ? mark_held_locks+0x130/0x130 [ 208.768829] ? __sched_text_start+0x8/0x8 [ 208.772965] ? lock_downgrade+0x900/0x900 [ 208.777099] ? kasan_check_read+0x11/0x20 [ 208.781237] ? lock_acquire+0x1ed/0x520 [ 208.785196] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 208.790250] ? preempt_count_add+0x7d/0x160 [ 208.794563] ? lock_release+0x970/0x970 [ 208.798626] ? kvm_gen_update_masterclock+0x350/0x350 [ 208.803800] ? preempt_schedule_common+0x1f/0xd0 [ 208.808543] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 208.813376] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 208.818381] kvm_vcpu_ioctl+0x72b/0x1150 [ 208.822426] ? kvm_vcpu_block+0x1030/0x1030 [ 208.826994] ? __fget+0x4aa/0x740 [ 208.830439] ? __f_unlock_pos+0x19/0x20 [ 208.834399] ? __fget+0x4d1/0x740 [ 208.837847] ? ksys_dup3+0x680/0x680 [ 208.841555] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 208.846577] ? fsnotify+0xaae/0x12f0 [ 208.850294] ? kvm_vcpu_block+0x1030/0x1030 [ 208.854600] do_vfs_ioctl+0x1de/0x1720 [ 208.858515] ? fsnotify_first_mark+0x350/0x350 [ 208.863086] ? __fsnotify_parent+0xcc/0x420 [ 208.867394] ? ioctl_preallocate+0x300/0x300 [ 208.871933] ? __fget_light+0x2e9/0x430 [ 208.875889] ? fget_raw+0x20/0x20 [ 208.879327] ? __sb_end_write+0xd9/0x110 [ 208.883380] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.888908] ? fput+0x130/0x1a0 [ 208.892182] ? ksys_write+0x1ae/0x260 [ 208.895975] ? security_file_ioctl+0x94/0xc0 [ 208.900384] ksys_ioctl+0xa9/0xd0 [ 208.903834] __x64_sys_ioctl+0x73/0xb0 [ 208.907717] do_syscall_64+0x1b9/0x820 [ 208.911608] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 208.916965] ? syscall_return_slowpath+0x5e0/0x5e0 [ 208.921882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.926781] ? trace_hardirqs_on_caller+0x310/0x310 [ 208.931794] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 208.936804] ? prepare_exit_to_usermode+0x291/0x3b0 [ 208.941813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.946660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.951841] RIP: 0033:0x457579 [ 208.955037] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.974050] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.981872] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 208.989280] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 208.996552] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.003908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 209.011175] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 [ 209.024284] audit: type=1326 audit(1538869464.177:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9024 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 209.053759] audit: type=1326 audit(1538869464.207:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9024 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:26 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001000)) 23:44:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 23:44:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:26 executing program 4 (fault-call:7 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x0, 0x99c, 0x0, 0x4}, 0x2c) 23:44:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5460, &(0x7f0000001000)) [ 211.477425] FAULT_INJECTION: forcing a failure. [ 211.477425] name failslab, interval 1, probability 0, space 0, times 0 [ 211.493968] CPU: 1 PID: 9060 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 211.501408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.510770] Call Trace: [ 211.513379] dump_stack+0x1c4/0x2b4 [ 211.517022] ? dump_stack_print_info.cold.2+0x52/0x52 [ 211.522245] should_fail.cold.4+0xa/0x17 23:44:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x0, 0x0, 0x4}, 0x2c) 23:44:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5451, &(0x7f0000001000)) [ 211.526324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 211.531442] ? save_stack+0xa9/0xd0 [ 211.535072] ? kasan_kmalloc+0xc7/0xe0 [ 211.538962] ? kasan_slab_alloc+0x12/0x20 [ 211.543109] ? kmem_cache_alloc+0x12e/0x730 [ 211.547438] ? mmu_topup_memory_caches+0xf7/0x390 [ 211.552289] ? kvm_mmu_load+0x21/0xfa0 [ 211.556199] ? vcpu_enter_guest+0x3dbe/0x6380 [ 211.560703] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 211.565733] ? do_vfs_ioctl+0x1de/0x1720 [ 211.569802] ? ksys_ioctl+0xa9/0xd0 [ 211.573438] ? __x64_sys_ioctl+0x73/0xb0 23:44:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c}, 0x2c) 23:44:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 211.577527] ? do_syscall_64+0x1b9/0x820 [ 211.581683] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.587057] ? percpu_ref_put_many+0x11c/0x260 [ 211.591657] ? lock_downgrade+0x900/0x900 [ 211.595813] ? lock_release+0x970/0x970 [ 211.599795] ? fs_reclaim_acquire+0x20/0x20 [ 211.604126] ? lock_downgrade+0x900/0x900 [ 211.608283] ? ___might_sleep+0x1ed/0x300 [ 211.612529] ? arch_local_save_flags+0x40/0x40 [ 211.617120] ? percpu_ref_put_many+0x13e/0x260 [ 211.621710] ? trace_hardirqs_on+0xbd/0x310 [ 211.626043] __should_failslab+0x124/0x180 [ 211.630288] should_failslab+0x9/0x14 [ 211.634096] kmem_cache_alloc+0x2be/0x730 [ 211.638248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 211.643792] ? kvm_pfn_to_page+0x7a/0xa0 [ 211.647859] ? mmu_topup_memory_caches+0xf7/0x390 [ 211.652751] mmu_topup_memory_caches+0xf7/0x390 [ 211.657421] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 211.662948] kvm_mmu_load+0x21/0xfa0 [ 211.662963] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 211.662975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:44:26 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:26 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c}, 0x2c) 23:44:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0189436, &(0x7f0000001000)) [ 211.662987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.663009] vcpu_enter_guest+0x3dbe/0x6380 [ 211.671716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.671739] ? check_preemption_disabled+0x48/0x200 [ 211.682783] ? emulator_read_emulated+0x50/0x50 [ 211.682800] ? perf_trace_lock+0x7a0/0x7a0 [ 211.682814] ? debug_smp_processor_id+0x1c/0x20 [ 211.682829] ? perf_trace_lock_acquire+0x15b/0x800 [ 211.692653] ? vmx_write_tsc_offset+0x680/0x680 [ 211.692669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.692685] ? check_preemption_disabled+0x48/0x200 [ 211.692702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.711249] ? check_preemption_disabled+0x48/0x200 [ 211.711269] ? perf_trace_lock_acquire+0x15b/0x800 [ 211.720847] ? lock_acquire+0x1ed/0x520 [ 211.720870] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 211.720886] ? lock_release+0x970/0x970 [ 211.746911] ? kvm_gen_update_masterclock+0x350/0x350 [ 211.746929] ? kvm_arch_dev_ioctl+0x630/0x630 [ 211.755908] ? preempt_notifier_dec+0x20/0x20 [ 211.755934] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 211.765091] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 211.765119] kvm_vcpu_ioctl+0x72b/0x1150 [ 211.774080] ? kvm_vcpu_block+0x1030/0x1030 [ 211.774104] ? __fget+0x4aa/0x740 [ 211.783944] ? __f_unlock_pos+0x19/0x20 [ 211.783959] ? __fget+0x4d1/0x740 [ 211.783977] ? ksys_dup3+0x680/0x680 [ 211.784000] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 211.792350] ? fsnotify+0xaae/0x12f0 [ 211.792376] ? kvm_vcpu_block+0x1030/0x1030 [ 211.799764] do_vfs_ioctl+0x1de/0x1720 [ 211.799778] ? fsnotify_first_mark+0x350/0x350 [ 211.799790] ? __fsnotify_parent+0xcc/0x420 [ 211.799809] ? ioctl_preallocate+0x300/0x300 [ 211.806951] ? __fget_light+0x2e9/0x430 [ 211.806964] ? fget_raw+0x20/0x20 [ 211.806983] ? __sb_end_write+0xd9/0x110 [ 211.815599] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 211.815615] ? fput+0x130/0x1a0 [ 211.815633] ? ksys_write+0x1ae/0x260 [ 211.828381] ? security_file_ioctl+0x94/0xc0 [ 211.828404] ksys_ioctl+0xa9/0xd0 [ 211.837103] __x64_sys_ioctl+0x73/0xb0 [ 211.837133] do_syscall_64+0x1b9/0x820 [ 211.876764] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 211.882744] ? syscall_return_slowpath+0x5e0/0x5e0 [ 211.887697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.892561] ? trace_hardirqs_on_caller+0x310/0x310 [ 211.897727] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 211.902762] ? prepare_exit_to_usermode+0x291/0x3b0 [ 211.907804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 211.912689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.917889] RIP: 0033:0x457579 23:44:27 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 211.921086] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.939986] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.940000] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 211.940006] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 211.940012] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 211.940018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 23:44:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 211.940026] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 [ 211.992553] FAULT_INJECTION: forcing a failure. [ 211.992553] name failslab, interval 1, probability 0, space 0, times 0 [ 212.006544] CPU: 0 PID: 9099 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #271 [ 212.013849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.023214] Call Trace: [ 212.023242] dump_stack+0x1c4/0x2b4 [ 212.023262] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.023283] should_fail.cold.4+0xa/0x17 [ 212.039087] ? __mutex_lock+0x85e/0x1700 [ 212.043147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.048236] ? mark_held_locks+0x130/0x130 [ 212.052457] ? _raw_spin_unlock+0x2c/0x50 [ 212.056591] ? mutex_trylock+0x2b0/0x2b0 [ 212.060649] ? dput.part.26+0x26d/0x790 [ 212.064628] ? lock_acquire+0x1ed/0x520 [ 212.068590] ? __fdget_pos+0x1bb/0x200 [ 212.072469] ? fs_reclaim_acquire+0x20/0x20 [ 212.076777] ? lock_downgrade+0x900/0x900 [ 212.080915] ? ___might_sleep+0x1ed/0x300 [ 212.085065] ? arch_local_save_flags+0x40/0x40 [ 212.089632] ? lock_release+0x970/0x970 [ 212.093597] __should_failslab+0x124/0x180 [ 212.098080] should_failslab+0x9/0x14 [ 212.101867] __kmalloc+0x2d4/0x760 [ 212.105408] ? input_mt_init_slots+0xe5/0x4a0 [ 212.109892] input_mt_init_slots+0xe5/0x4a0 [ 212.114202] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 212.119552] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 212.124905] ? __fget+0x4d1/0x740 [ 212.128345] ? ksys_dup3+0x680/0x680 [ 212.132047] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 212.136963] ? fsnotify+0xaae/0x12f0 [ 212.140663] uinput_ioctl+0x4c/0x60 [ 212.144280] ? uinput_compat_ioctl+0x90/0x90 [ 212.148673] do_vfs_ioctl+0x1de/0x1720 [ 212.152545] ? fsnotify_first_mark+0x350/0x350 [ 212.157111] ? __fsnotify_parent+0xcc/0x420 [ 212.161423] ? ioctl_preallocate+0x300/0x300 [ 212.165933] ? __fget_light+0x2e9/0x430 [ 212.169905] ? fget_raw+0x20/0x20 [ 212.173363] ? __sb_end_write+0xd9/0x110 [ 212.177429] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 212.182947] ? fput+0x130/0x1a0 [ 212.186216] ? ksys_write+0x1ae/0x260 [ 212.190007] ? security_file_ioctl+0x94/0xc0 [ 212.194401] ksys_ioctl+0xa9/0xd0 [ 212.197847] __x64_sys_ioctl+0x73/0xb0 [ 212.201723] do_syscall_64+0x1b9/0x820 [ 212.205597] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 212.210957] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.215890] ? trace_hardirqs_on_caller+0x310/0x310 [ 212.220894] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 212.225902] ? recalc_sigpending_tsk+0x180/0x180 [ 212.230646] ? kasan_check_write+0x14/0x20 [ 212.234875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.239706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.244998] RIP: 0033:0x457579 [ 212.248180] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.267066] RSP: 002b:00007f0d7a145c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:44:27 executing program 4 (fault-call:7 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 23:44:27 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c}, 0x2c) [ 212.274760] RAX: ffffffffffffffda RBX: 00007f0d7a145c90 RCX: 0000000000457579 [ 212.282014] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 212.289268] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.296529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d7a1466d4 [ 212.303785] R13: 00000000004c1284 R14: 00000000004d1e78 R15: 0000000000000004 23:44:27 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 212.358715] audit: type=1326 audit(1538869467.507:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9087 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) [ 212.424895] audit: type=1326 audit(1538869467.557:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9087 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 212.452719] FAULT_INJECTION: forcing a failure. [ 212.452719] name failslab, interval 1, probability 0, space 0, times 0 [ 212.465342] FAULT_INJECTION: forcing a failure. [ 212.465342] name failslab, interval 1, probability 0, space 0, times 0 [ 212.465630] CPU: 1 PID: 9117 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 212.483843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.493299] Call Trace: [ 212.495911] dump_stack+0x1c4/0x2b4 [ 212.499539] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.504728] ? __kernel_text_address+0xd/0x40 [ 212.509221] ? unwind_get_return_address+0x61/0xa0 [ 212.514150] should_fail.cold.4+0xa/0x17 [ 212.518207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.523306] ? save_stack+0xa9/0xd0 [ 212.526933] ? kasan_kmalloc+0xc7/0xe0 [ 212.530846] ? kasan_slab_alloc+0x12/0x20 [ 212.535003] ? kmem_cache_alloc+0x12e/0x730 [ 212.539318] ? mmu_topup_memory_caches+0xf7/0x390 [ 212.544166] ? kvm_mmu_load+0x21/0xfa0 [ 212.548060] ? vcpu_enter_guest+0x3dbe/0x6380 [ 212.552558] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 212.557569] ? do_vfs_ioctl+0x1de/0x1720 [ 212.561624] ? ksys_ioctl+0xa9/0xd0 [ 212.565326] ? __x64_sys_ioctl+0x73/0xb0 [ 212.569378] ? do_syscall_64+0x1b9/0x820 [ 212.573434] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.578790] ? percpu_ref_put_many+0x11c/0x260 [ 212.583373] ? lock_downgrade+0x900/0x900 [ 212.587514] ? lock_release+0x970/0x970 [ 212.591483] ? fs_reclaim_acquire+0x20/0x20 [ 212.595813] ? lock_downgrade+0x900/0x900 [ 212.599953] ? ___might_sleep+0x1ed/0x300 [ 212.604107] ? arch_local_save_flags+0x40/0x40 [ 212.608777] ? percpu_ref_put_many+0x13e/0x260 [ 212.613351] ? trace_hardirqs_on+0xbd/0x310 [ 212.617672] __should_failslab+0x124/0x180 [ 212.621911] should_failslab+0x9/0x14 [ 212.625704] kmem_cache_alloc+0x2be/0x730 [ 212.629854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 212.635392] ? kvm_pfn_to_page+0x7a/0xa0 [ 212.639448] ? mmu_topup_memory_caches+0xf7/0x390 [ 212.644280] mmu_topup_memory_caches+0xf7/0x390 [ 212.648937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 212.654466] kvm_mmu_load+0x21/0xfa0 [ 212.658170] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 212.663090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.668619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 212.674147] vcpu_enter_guest+0x3dbe/0x6380 [ 212.678468] ? emulator_read_emulated+0x50/0x50 [ 212.683148] ? vmx_vcpu_load+0xb06/0x1030 [ 212.687289] ? mark_held_locks+0x130/0x130 [ 212.691532] ? vmx_write_tsc_offset+0x680/0x680 [ 212.697865] ? lock_downgrade+0x900/0x900 [ 212.702005] ? kasan_check_read+0x11/0x20 [ 212.706157] ? lock_acquire+0x1ed/0x520 [ 212.710119] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 212.715126] ? preempt_count_add+0x7d/0x160 [ 212.719439] ? lock_release+0x970/0x970 [ 212.723403] ? kvm_gen_update_masterclock+0x350/0x350 [ 212.728581] ? kvm_arch_dev_ioctl+0x630/0x630 [ 212.733070] ? preempt_notifier_dec+0x20/0x20 [ 212.737562] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 212.742397] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 212.747411] kvm_vcpu_ioctl+0x72b/0x1150 [ 212.751467] ? kvm_vcpu_block+0x1030/0x1030 [ 212.755792] ? __fget+0x4aa/0x740 [ 212.759252] ? __f_unlock_pos+0x19/0x20 [ 212.763224] ? __fget+0x4d1/0x740 [ 212.766672] ? ksys_dup3+0x680/0x680 [ 212.770383] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 212.775306] ? fsnotify+0xaae/0x12f0 [ 212.779014] ? kvm_vcpu_block+0x1030/0x1030 [ 212.783324] do_vfs_ioctl+0x1de/0x1720 [ 212.787199] ? fsnotify_first_mark+0x350/0x350 [ 212.791767] ? __fsnotify_parent+0xcc/0x420 [ 212.796079] ? ioctl_preallocate+0x300/0x300 [ 212.800495] ? __fget_light+0x2e9/0x430 [ 212.804458] ? fget_raw+0x20/0x20 [ 212.807918] ? __sb_end_write+0xd9/0x110 [ 212.811988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 212.817529] ? fput+0x130/0x1a0 [ 212.820807] ? ksys_write+0x1ae/0x260 [ 212.824606] ? security_file_ioctl+0x94/0xc0 [ 212.829006] ksys_ioctl+0xa9/0xd0 [ 212.832451] __x64_sys_ioctl+0x73/0xb0 [ 212.836344] do_syscall_64+0x1b9/0x820 [ 212.840237] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 212.845597] ? syscall_return_slowpath+0x5e0/0x5e0 [ 212.850515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.855350] ? trace_hardirqs_on_caller+0x310/0x310 [ 212.860359] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 212.865367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 212.870468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.875337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 212.880521] RIP: 0033:0x457579 [ 212.883712] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.902739] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.910539] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 212.917804] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 212.925165] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.932424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 212.939706] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 [ 212.950133] CPU: 0 PID: 9122 Comm: syz-executor1 Not tainted 4.19.0-rc6+ #271 [ 212.953775] audit: type=1326 audit(1538869467.557:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9087 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 212.957443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.957449] Call Trace: [ 212.957476] dump_stack+0x1c4/0x2b4 [ 212.957495] ? dump_stack_print_info.cold.2+0x52/0x52 [ 212.988231] ? mnt_get_count+0x150/0x150 [ 212.988258] should_fail.cold.4+0xa/0x17 [ 212.988278] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.994490] ? lock_acquire+0x1ed/0x520 [ 213.003707] ? __fdget_pos+0x1bb/0x200 [ 213.003729] ? lock_release+0x970/0x970 [ 213.003749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 213.012921] ? _parse_integer+0x134/0x180 [ 213.012941] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 213.012959] ? _kstrtoull+0x188/0x250 [ 213.012979] ? fs_reclaim_acquire+0x20/0x20 [ 213.012993] ? lock_downgrade+0x900/0x900 [ 213.013014] ? ___might_sleep+0x1ed/0x300 [ 213.013028] ? arch_local_save_flags+0x40/0x40 [ 213.013049] ? get_pid_task+0xd6/0x1a0 [ 213.020886] __should_failslab+0x124/0x180 [ 213.020903] should_failslab+0x9/0x14 [ 213.020921] kmem_cache_alloc_node_trace+0x270/0x740 [ 213.020936] ? pid_task+0x115/0x200 [ 213.082112] ? find_vpid+0xf0/0xf0 [ 213.085656] cgroup_storage_map_alloc+0x24d/0x430 [ 213.090580] ? cgroup_storage_map_free+0x210/0x210 [ 213.095522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 213.101068] ? proc_fail_nth_write+0x9e/0x210 [ 213.105561] ? proc_cwd_link+0x1d0/0x1d0 [ 213.109633] ? cgroup_storage_map_free+0x210/0x210 [ 213.114560] map_create+0x3bd/0x10f0 [ 213.118285] ? bpf_map_new_fd+0x70/0x70 [ 213.122260] ? __might_fault+0x12b/0x1e0 [ 213.126319] ? lock_downgrade+0x900/0x900 [ 213.130459] ? lock_release+0x970/0x970 [ 213.134427] ? arch_local_save_flags+0x40/0x40 [ 213.139005] ? usercopy_warn+0x110/0x110 [ 213.143072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 213.148605] __x64_sys_bpf+0x303/0x510 [ 213.152484] ? bpf_prog_get+0x20/0x20 [ 213.156292] do_syscall_64+0x1b9/0x820 [ 213.160192] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 213.165550] ? syscall_return_slowpath+0x5e0/0x5e0 [ 213.170485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.175323] ? trace_hardirqs_on_caller+0x310/0x310 [ 213.180346] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 213.185363] ? prepare_exit_to_usermode+0x291/0x3b0 [ 213.190380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.195224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.200404] RIP: 0033:0x457579 [ 213.203591] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:44:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 213.222487] RSP: 002b:00007fa1188edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.230190] RAX: ffffffffffffffda RBX: 00007fa1188edc90 RCX: 0000000000457579 [ 213.237466] RDX: 000000000000002c RSI: 0000000020000040 RDI: 0000000000000000 [ 213.244727] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 213.251988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1188ee6d4 [ 213.259247] R13: 00000000004bd8ee R14: 00000000004cc250 R15: 0000000000000004 [ 213.315667] input: syz1 as /devices/virtual/input/input51 23:44:29 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:29 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5452, &(0x7f0000001000)) 23:44:29 executing program 4 (fault-call:7 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:44:29 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045567) 23:44:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x800455d1, &(0x7f0000001000)) [ 214.851608] FAULT_INJECTION: forcing a failure. [ 214.851608] name failslab, interval 1, probability 0, space 0, times 0 [ 214.888637] CPU: 0 PID: 9149 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 214.895970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.905338] Call Trace: [ 214.907980] dump_stack+0x1c4/0x2b4 [ 214.911635] ? dump_stack_print_info.cold.2+0x52/0x52 [ 214.916870] ? __kernel_text_address+0xd/0x40 [ 214.921408] ? unwind_get_return_address+0x61/0xa0 [ 214.926362] should_fail.cold.4+0xa/0x17 [ 214.930429] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 214.935538] ? save_stack+0xa9/0xd0 [ 214.939249] ? kasan_kmalloc+0xc7/0xe0 [ 214.943128] ? kasan_slab_alloc+0x12/0x20 [ 214.947265] ? kmem_cache_alloc+0x12e/0x730 [ 214.951579] ? mmu_topup_memory_caches+0xf7/0x390 [ 214.956411] ? kvm_mmu_load+0x21/0xfa0 [ 214.960288] ? vcpu_enter_guest+0x3dbe/0x6380 [ 214.964780] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 214.969800] ? do_vfs_ioctl+0x1de/0x1720 [ 214.973856] ? ksys_ioctl+0xa9/0xd0 [ 214.977475] ? __x64_sys_ioctl+0x73/0xb0 [ 214.981528] ? do_syscall_64+0x1b9/0x820 [ 214.985581] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.990940] ? percpu_ref_put_many+0x11c/0x260 [ 214.995515] ? lock_downgrade+0x900/0x900 [ 214.999656] ? lock_release+0x970/0x970 [ 215.003636] ? fs_reclaim_acquire+0x20/0x20 [ 215.007953] ? lock_downgrade+0x900/0x900 [ 215.012094] ? lock_downgrade+0x900/0x900 [ 215.016254] ? ___might_sleep+0x1ed/0x300 [ 215.020403] ? arch_local_save_flags+0x40/0x40 [ 215.024981] ? percpu_ref_put_many+0x13e/0x260 [ 215.029556] ? trace_hardirqs_on+0xbd/0x310 [ 215.033877] __should_failslab+0x124/0x180 [ 215.038116] should_failslab+0x9/0x14 [ 215.041910] kmem_cache_alloc+0x2be/0x730 [ 215.046075] ? mmu_topup_memory_caches+0xf7/0x390 [ 215.050929] mmu_topup_memory_caches+0xf7/0x390 [ 215.055591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 215.061129] kvm_mmu_load+0x21/0xfa0 [ 215.064841] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 215.069766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.075310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.081467] vcpu_enter_guest+0x3dbe/0x6380 [ 215.085816] ? emulator_read_emulated+0x50/0x50 [ 215.090482] ? vmx_vcpu_load+0xb06/0x1030 [ 215.094620] ? mark_held_locks+0x130/0x130 [ 215.099191] ? vmx_write_tsc_offset+0x680/0x680 [ 215.103866] ? lock_downgrade+0x900/0x900 [ 215.108002] ? kasan_check_read+0x11/0x20 [ 215.112157] ? lock_acquire+0x1ed/0x520 [ 215.116120] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 215.121130] ? preempt_count_add+0x7d/0x160 [ 215.125446] ? lock_release+0x970/0x970 [ 215.129410] ? kvm_gen_update_masterclock+0x350/0x350 [ 215.134594] ? kvm_arch_dev_ioctl+0x630/0x630 [ 215.139098] ? preempt_notifier_dec+0x20/0x20 [ 215.143596] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 215.148434] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 215.153452] kvm_vcpu_ioctl+0x72b/0x1150 [ 215.157507] ? kvm_vcpu_block+0x1030/0x1030 [ 215.161840] ? __fget+0x4aa/0x740 [ 215.165301] ? __f_unlock_pos+0x19/0x20 [ 215.169275] ? __fget+0x4d1/0x740 [ 215.172746] ? ksys_dup3+0x680/0x680 [ 215.176465] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 215.181389] ? fsnotify+0xaae/0x12f0 [ 215.185099] ? kvm_vcpu_block+0x1030/0x1030 [ 215.189412] do_vfs_ioctl+0x1de/0x1720 [ 215.193475] ? fsnotify_first_mark+0x350/0x350 [ 215.198050] ? __fsnotify_parent+0xcc/0x420 [ 215.202377] ? ioctl_preallocate+0x300/0x300 [ 215.206778] ? __fget_light+0x2e9/0x430 [ 215.210749] ? fget_raw+0x20/0x20 [ 215.214196] ? __sb_end_write+0xd9/0x110 [ 215.218258] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 215.223789] ? fput+0x130/0x1a0 [ 215.227076] ? ksys_write+0x1ae/0x260 [ 215.230875] ? security_file_ioctl+0x94/0xc0 [ 215.235302] ksys_ioctl+0xa9/0xd0 [ 215.238764] __x64_sys_ioctl+0x73/0xb0 [ 215.242651] do_syscall_64+0x1b9/0x820 [ 215.246540] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 215.251909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 215.256836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.261683] ? trace_hardirqs_on_caller+0x310/0x310 [ 215.266698] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 215.271718] ? prepare_exit_to_usermode+0x291/0x3b0 [ 215.276733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.281573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.286755] RIP: 0033:0x457579 23:44:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x280) 23:44:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551b, &(0x7f0000001000)) [ 215.289942] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.308836] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.316538] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 215.323808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 215.331082] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 215.338342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 215.345604] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 [ 215.422092] audit: type=1326 audit(1538869470.577:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9151 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 215.476720] audit: type=1326 audit(1538869470.617:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9151 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 215.498596] audit: type=1326 audit(1538869470.617:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9151 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 215.520006] audit: type=1326 audit(1538869470.677:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9151 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:44:32 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:44:32 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40049409) 23:44:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:32 executing program 4 (fault-call:7 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5421, &(0x7f0000001000)) 23:44:33 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5460) [ 217.883236] FAULT_INJECTION: forcing a failure. [ 217.883236] name failslab, interval 1, probability 0, space 0, times 0 [ 217.899998] CPU: 0 PID: 9193 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 217.907306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.917124] Call Trace: [ 217.919739] dump_stack+0x1c4/0x2b4 [ 217.923477] ? dump_stack_print_info.cold.2+0x52/0x52 [ 217.928696] ? __kernel_text_address+0xd/0x40 [ 217.933206] ? unwind_get_return_address+0x61/0xa0 [ 217.938161] should_fail.cold.4+0xa/0x17 [ 217.942244] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 217.947358] ? save_stack+0xa9/0xd0 [ 217.950995] ? kasan_kmalloc+0xc7/0xe0 [ 217.954894] ? kasan_slab_alloc+0x12/0x20 [ 217.959051] ? kmem_cache_alloc+0x12e/0x730 [ 217.963381] ? mmu_topup_memory_caches+0xf7/0x390 [ 217.968231] ? kvm_mmu_load+0x21/0xfa0 [ 217.972135] ? vcpu_enter_guest+0x3dbe/0x6380 [ 217.976642] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 217.981676] ? do_vfs_ioctl+0x1de/0x1720 [ 217.981690] ? ksys_ioctl+0xa9/0xd0 [ 217.981702] ? __x64_sys_ioctl+0x73/0xb0 [ 217.981720] ? do_syscall_64+0x1b9/0x820 [ 217.989383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.989399] ? percpu_ref_put_many+0x11c/0x260 [ 217.989414] ? lock_downgrade+0x900/0x900 [ 217.989427] ? lock_release+0x970/0x970 [ 217.989446] ? fs_reclaim_acquire+0x20/0x20 [ 218.002905] ? lock_downgrade+0x900/0x900 [ 218.002918] ? lock_downgrade+0x900/0x900 [ 218.002937] ? ___might_sleep+0x1ed/0x300 [ 218.015615] ? arch_local_save_flags+0x40/0x40 [ 218.036905] ? percpu_ref_put_many+0x13e/0x260 [ 218.036921] ? trace_hardirqs_on+0xbd/0x310 [ 218.036944] __should_failslab+0x124/0x180 [ 218.045827] should_failslab+0x9/0x14 [ 218.045849] kmem_cache_alloc+0x2be/0x730 [ 218.057998] ? mmu_topup_memory_caches+0xf7/0x390 [ 218.062853] mmu_topup_memory_caches+0xf7/0x390 [ 218.067550] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.073104] kvm_mmu_load+0x21/0xfa0 [ 218.073120] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 218.073139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.081878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.081897] vcpu_enter_guest+0x3dbe/0x6380 [ 218.081916] ? emulator_read_emulated+0x50/0x50 [ 218.092972] ? vmx_vcpu_load+0xb06/0x1030 [ 218.092987] ? mark_held_locks+0x130/0x130 [ 218.093003] ? vmx_write_tsc_offset+0x680/0x680 [ 218.115103] ? lock_downgrade+0x900/0x900 [ 218.119266] ? kasan_check_read+0x11/0x20 [ 218.123440] ? lock_acquire+0x1ed/0x520 [ 218.127433] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 218.132464] ? preempt_count_add+0x7d/0x160 [ 218.136809] ? lock_release+0x970/0x970 [ 218.140804] ? kvm_gen_update_masterclock+0x350/0x350 [ 218.146012] ? kvm_arch_dev_ioctl+0x630/0x630 [ 218.150531] ? preempt_notifier_dec+0x20/0x20 [ 218.155050] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 218.159912] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 218.164955] kvm_vcpu_ioctl+0x72b/0x1150 [ 218.169035] ? kvm_vcpu_block+0x1030/0x1030 [ 218.173419] ? __fget+0x4aa/0x740 [ 218.173444] ? __f_unlock_pos+0x19/0x20 [ 218.180842] ? __fget+0x4d1/0x740 [ 218.180858] ? ksys_dup3+0x680/0x680 [ 218.180877] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 218.180895] ? fsnotify+0xaae/0x12f0 [ 218.196670] ? kvm_vcpu_block+0x1030/0x1030 [ 218.201009] do_vfs_ioctl+0x1de/0x1720 [ 218.204917] ? fsnotify_first_mark+0x350/0x350 [ 218.209524] ? __fsnotify_parent+0xcc/0x420 [ 218.213861] ? ioctl_preallocate+0x300/0x300 [ 218.218289] ? __fget_light+0x2e9/0x430 [ 218.222281] ? fget_raw+0x20/0x20 [ 218.225758] ? __sb_end_write+0xd9/0x110 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045516, &(0x7f0000001000)) 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 23:44:33 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:44:33 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xa00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 23:44:33 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1200, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4020940d, &(0x7f0000001000)) [ 218.229839] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.235391] ? fput+0x130/0x1a0 [ 218.238694] ? ksys_write+0x1ae/0x260 [ 218.242524] ? security_file_ioctl+0x94/0xc0 [ 218.246953] ksys_ioctl+0xa9/0xd0 [ 218.250428] __x64_sys_ioctl+0x73/0xb0 [ 218.254325] do_syscall_64+0x1b9/0x820 [ 218.254342] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 218.254362] ? syscall_return_slowpath+0x5e0/0x5e0 [ 218.263589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.263604] ? trace_hardirqs_on_caller+0x310/0x310 [ 218.263621] ? prepare_exit_to_usermode+0x291/0x3b0 [ 218.263639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.263661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.263671] RIP: 0033:0x457579 [ 218.263684] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.263691] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.263708] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 218.283441] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 218.283450] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 218.283459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 218.283468] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045566) 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 23:44:33 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:33 executing program 2: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:44:33 executing program 4 (fault-call:7 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 23:44:33 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x14, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551a, &(0x7f0000001000)) [ 218.748946] FAULT_INJECTION: forcing a failure. [ 218.748946] name failslab, interval 1, probability 0, space 0, times 0 [ 218.789986] CPU: 0 PID: 9252 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 218.797305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.806672] Call Trace: [ 218.809288] dump_stack+0x1c4/0x2b4 [ 218.812929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 218.812949] ? __kernel_text_address+0xd/0x40 [ 218.822630] ? unwind_get_return_address+0x61/0xa0 [ 218.822649] should_fail.cold.4+0xa/0x17 [ 218.831636] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 218.836751] ? save_stack+0xa9/0xd0 [ 218.836766] ? kasan_kmalloc+0xc7/0xe0 [ 218.844257] ? kasan_slab_alloc+0x12/0x20 [ 218.848402] ? kmem_cache_alloc+0x12e/0x730 [ 218.848418] ? mmu_topup_memory_caches+0xf7/0x390 [ 218.848432] ? kvm_mmu_load+0x21/0xfa0 [ 218.861461] ? vcpu_enter_guest+0x3dbe/0x6380 [ 218.861473] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 218.861491] ? do_vfs_ioctl+0x1de/0x1720 [ 218.875041] ? ksys_ioctl+0xa9/0xd0 [ 218.878674] ? __x64_sys_ioctl+0x73/0xb0 [ 218.882741] ? do_syscall_64+0x1b9/0x820 [ 218.886816] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.892193] ? percpu_ref_put_many+0x11c/0x260 [ 218.896788] ? lock_downgrade+0x900/0x900 [ 218.900952] ? lock_release+0x970/0x970 [ 218.904941] ? fs_reclaim_acquire+0x20/0x20 [ 218.909272] ? lock_downgrade+0x900/0x900 [ 218.913769] ? ___might_sleep+0x1ed/0x300 [ 218.913782] ? arch_local_save_flags+0x40/0x40 [ 218.913799] ? percpu_ref_put_many+0x13e/0x260 [ 218.922501] ? trace_hardirqs_on+0xbd/0x310 [ 218.922522] __should_failslab+0x124/0x180 [ 218.922538] should_failslab+0x9/0x14 23:44:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 23:44:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 23:44:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5450, &(0x7f0000001000)) [ 218.931439] kmem_cache_alloc+0x2be/0x730 [ 218.931466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.939592] ? kvm_pfn_to_page+0x7a/0xa0 [ 218.939614] ? mmu_topup_memory_caches+0xf7/0x390 [ 218.939632] mmu_topup_memory_caches+0xf7/0x390 [ 218.949280] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 218.949295] kvm_mmu_load+0x21/0xfa0 [ 218.949313] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 218.958316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.958331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 218.958352] vcpu_enter_guest+0x3dbe/0x6380 [ 218.982673] ? emulator_read_emulated+0x50/0x50 [ 218.992494] ? vmx_vcpu_load+0xb06/0x1030 [ 218.992507] ? mark_held_locks+0x130/0x130 [ 218.992520] ? vmx_write_tsc_offset+0x680/0x680 [ 218.992531] ? lock_downgrade+0x900/0x900 [ 218.992548] ? kasan_check_read+0x11/0x20 [ 219.018500] ? lock_acquire+0x1ed/0x520 [ 219.022488] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 219.027526] ? preempt_count_add+0x7d/0x160 [ 219.027545] ? lock_release+0x970/0x970 [ 219.035818] ? kvm_gen_update_masterclock+0x350/0x350 [ 219.035836] ? kvm_arch_dev_ioctl+0x630/0x630 [ 219.045500] ? preempt_notifier_dec+0x20/0x20 [ 219.050017] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 219.054863] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 219.059870] kvm_vcpu_ioctl+0x72b/0x1150 [ 219.063920] ? kvm_vcpu_block+0x1030/0x1030 [ 219.068233] ? __fget+0x4aa/0x740 [ 219.071681] ? __f_unlock_pos+0x19/0x20 [ 219.075650] ? __fget+0x4d1/0x740 [ 219.079579] ? ksys_dup3+0x680/0x680 [ 219.083288] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 219.088204] ? fsnotify+0xaae/0x12f0 [ 219.091905] ? kvm_vcpu_block+0x1030/0x1030 [ 219.096210] do_vfs_ioctl+0x1de/0x1720 [ 219.100096] ? fsnotify_first_mark+0x350/0x350 [ 219.104669] ? __fsnotify_parent+0xcc/0x420 [ 219.108974] ? ioctl_preallocate+0x300/0x300 [ 219.113366] ? __fget_light+0x2e9/0x430 [ 219.117324] ? fget_raw+0x20/0x20 [ 219.120760] ? __sb_end_write+0xd9/0x110 [ 219.124813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 219.130334] ? fput+0x130/0x1a0 [ 219.133604] ? ksys_write+0x1ae/0x260 [ 219.137390] ? security_file_ioctl+0x94/0xc0 [ 219.141784] ksys_ioctl+0xa9/0xd0 [ 219.145221] __x64_sys_ioctl+0x73/0xb0 [ 219.149097] do_syscall_64+0x1b9/0x820 [ 219.152980] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 219.158327] ? syscall_return_slowpath+0x5e0/0x5e0 [ 219.163236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.168062] ? trace_hardirqs_on_caller+0x310/0x310 [ 219.173063] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 219.178061] ? prepare_exit_to_usermode+0x291/0x3b0 [ 219.183059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.187890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.193062] RIP: 0033:0x457579 [ 219.196240] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.215125] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.222820] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 219.230074] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 219.237329] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 219.244581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 219.251840] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40049409, &(0x7f0000001000)) 23:44:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 23:44:34 executing program 4 (fault-call:7 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:34 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002f002908000000000000000003000200000000000000000000000001000000000000000000000000"], 0x1}}, 0x0) 23:44:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 23:44:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x2, &(0x7f0000001000)) 23:44:34 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 219.644796] FAULT_INJECTION: forcing a failure. [ 219.644796] name failslab, interval 1, probability 0, space 0, times 0 [ 219.656227] CPU: 0 PID: 9290 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 219.663513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.672863] Call Trace: [ 219.675461] dump_stack+0x1c4/0x2b4 [ 219.679110] ? dump_stack_print_info.cold.2+0x52/0x52 [ 219.684308] ? __kernel_text_address+0xd/0x40 [ 219.688813] ? unwind_get_return_address+0x61/0xa0 [ 219.693755] should_fail.cold.4+0xa/0x17 [ 219.697835] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 219.702937] ? save_stack+0xa9/0xd0 [ 219.702952] ? kasan_kmalloc+0xc7/0xe0 [ 219.710438] ? kasan_slab_alloc+0x12/0x20 [ 219.710451] ? kmem_cache_alloc+0x12e/0x730 [ 219.710465] ? mmu_topup_memory_caches+0xf7/0x390 [ 219.710480] ? kvm_mmu_load+0x21/0xfa0 [ 219.718904] ? vcpu_enter_guest+0x3dbe/0x6380 [ 219.718916] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 219.718933] ? do_vfs_ioctl+0x1de/0x1720 [ 219.727629] ? ksys_ioctl+0xa9/0xd0 23:44:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5450) [ 219.727641] ? __x64_sys_ioctl+0x73/0xb0 [ 219.727658] ? do_syscall_64+0x1b9/0x820 [ 219.737125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.737138] ? percpu_ref_put_many+0x11c/0x260 [ 219.737154] ? lock_downgrade+0x900/0x900 [ 219.744809] ? lock_release+0x970/0x970 [ 219.744824] ? fs_reclaim_acquire+0x20/0x20 [ 219.744839] ? lock_downgrade+0x900/0x900 [ 219.762834] ? lock_downgrade+0x900/0x900 [ 219.762850] ? ___might_sleep+0x1ed/0x300 [ 219.762867] ? arch_local_save_flags+0x40/0x40 [ 219.770949] ? percpu_ref_put_many+0x13e/0x260 [ 219.770962] ? trace_hardirqs_on+0xbd/0x310 [ 219.770979] __should_failslab+0x124/0x180 [ 219.770990] should_failslab+0x9/0x14 [ 219.771003] kmem_cache_alloc+0x2be/0x730 [ 219.771023] ? mmu_topup_memory_caches+0xf7/0x390 [ 219.787734] mmu_topup_memory_caches+0xf7/0x390 [ 219.787753] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 219.796878] kvm_mmu_load+0x21/0xfa0 [ 219.796891] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 219.796909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.805432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 219.805449] vcpu_enter_guest+0x3dbe/0x6380 [ 219.805470] ? emulator_read_emulated+0x50/0x50 [ 219.813379] ? vmx_vcpu_load+0xb06/0x1030 [ 219.813400] ? mark_held_locks+0x130/0x130 [ 219.813417] ? vmx_write_tsc_offset+0x680/0x680 [ 219.822895] ? lock_downgrade+0x900/0x900 [ 219.837031] ? kasan_check_read+0x11/0x20 [ 219.837058] ? lock_acquire+0x1ed/0x520 [ 219.882334] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 219.887369] ? preempt_count_add+0x7d/0x160 [ 219.891720] ? lock_release+0x970/0x970 23:44:35 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xf00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 219.895703] ? kvm_gen_update_masterclock+0x350/0x350 [ 219.900908] ? kvm_arch_dev_ioctl+0x630/0x630 [ 219.905416] ? preempt_notifier_dec+0x20/0x20 [ 219.905440] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 219.916434] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 219.916459] kvm_vcpu_ioctl+0x72b/0x1150 [ 219.925507] ? kvm_vcpu_block+0x1030/0x1030 [ 219.929853] ? __fget+0x4aa/0x740 [ 219.933325] ? __f_unlock_pos+0x19/0x20 [ 219.937306] ? __fget+0x4d1/0x740 [ 219.940764] ? ksys_dup3+0x680/0x680 23:44:35 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x18, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 219.944493] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 219.949425] ? fsnotify+0xaae/0x12f0 [ 219.953148] ? kvm_vcpu_block+0x1030/0x1030 [ 219.953168] do_vfs_ioctl+0x1de/0x1720 [ 219.961358] ? fsnotify_first_mark+0x350/0x350 [ 219.965942] ? __fsnotify_parent+0xcc/0x420 [ 219.965963] ? ioctl_preallocate+0x300/0x300 [ 219.974656] ? __fget_light+0x2e9/0x430 [ 219.978633] ? fget_raw+0x20/0x20 [ 219.978650] ? __sb_end_write+0xd9/0x110 [ 219.978669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 219.986490] ? fput+0x130/0x1a0 [ 219.986507] ? ksys_write+0x1ae/0x260 [ 219.986526] ? security_file_ioctl+0x94/0xc0 [ 220.003502] ksys_ioctl+0xa9/0xd0 [ 220.006966] __x64_sys_ioctl+0x73/0xb0 [ 220.010861] do_syscall_64+0x1b9/0x820 [ 220.014741] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 220.014759] ? syscall_return_slowpath+0x5e0/0x5e0 [ 220.025042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.029882] ? trace_hardirqs_on_caller+0x310/0x310 [ 220.029899] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 220.029916] ? prepare_exit_to_usermode+0x291/0x3b0 [ 220.045274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.050131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.055322] RIP: 0033:0x457579 [ 220.058515] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 220.077425] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.085139] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 220.092418] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 220.099670] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 220.106924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 220.114170] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 23:44:35 executing program 0: pipe2(&(0x7f0000000040), 0x800) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffd) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x3ff}, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:35 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xc, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:35 executing program 2: mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000000100), 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[]}}, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 23:44:35 executing program 4 (fault-call:7 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:35 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2aec, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x20000001) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x553d) 23:44:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xff0c, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) [ 220.542590] FAULT_INJECTION: forcing a failure. [ 220.542590] name failslab, interval 1, probability 0, space 0, times 0 23:44:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2080, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 220.615617] CPU: 0 PID: 9343 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 220.617999] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.622940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.622947] Call Trace: [ 220.622974] dump_stack+0x1c4/0x2b4 [ 220.622992] ? dump_stack_print_info.cold.2+0x52/0x52 [ 220.623017] ? __kernel_text_address+0xd/0x40 [ 220.656097] ? unwind_get_return_address+0x61/0xa0 [ 220.656115] should_fail.cold.4+0xa/0x17 [ 220.656133] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 220.670822] ? save_stack+0xa9/0xd0 [ 220.670837] ? kasan_kmalloc+0xc7/0xe0 [ 220.670846] ? kasan_slab_alloc+0x12/0x20 [ 220.670861] ? kmem_cache_alloc+0x12e/0x730 [ 220.670881] ? mmu_topup_memory_caches+0xf7/0x390 [ 220.700774] ? kvm_mmu_load+0x21/0xfa0 [ 220.704665] ? vcpu_enter_guest+0x3dbe/0x6380 [ 220.709184] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 23:44:35 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x8, 0x24, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f0000000140)) [ 220.714218] ? do_vfs_ioctl+0x1de/0x1720 [ 220.718285] ? ksys_ioctl+0xa9/0xd0 [ 220.721915] ? __x64_sys_ioctl+0x73/0xb0 [ 220.721930] ? do_syscall_64+0x1b9/0x820 [ 220.721947] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.730032] ? percpu_ref_put_many+0x11c/0x260 [ 220.730046] ? lock_downgrade+0x900/0x900 [ 220.730059] ? lock_release+0x970/0x970 [ 220.730077] ? fs_reclaim_acquire+0x20/0x20 [ 220.744113] ? lock_downgrade+0x900/0x900 [ 220.744133] ? ___might_sleep+0x1ed/0x300 [ 220.752400] ? arch_local_save_flags+0x40/0x40 [ 220.752418] ? percpu_ref_put_many+0x13e/0x260 [ 220.769811] ? trace_hardirqs_on+0xbd/0x310 [ 220.769832] __should_failslab+0x124/0x180 [ 220.769845] should_failslab+0x9/0x14 [ 220.769864] kmem_cache_alloc+0x2be/0x730 [ 220.782180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 220.782200] ? mmu_topup_memory_caches+0xf7/0x390 [ 220.796692] mmu_topup_memory_caches+0xf7/0x390 [ 220.802333] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 220.807896] kvm_mmu_load+0x21/0xfa0 [ 220.811617] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 220.811633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.811649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 220.822085] vcpu_enter_guest+0x3dbe/0x6380 [ 220.822105] ? emulator_read_emulated+0x50/0x50 [ 220.822122] ? vmx_vcpu_load+0xb06/0x1030 [ 220.840747] ? mark_held_locks+0x130/0x130 [ 220.845000] ? vmx_write_tsc_offset+0x680/0x680 [ 220.849681] ? lock_downgrade+0x900/0x900 [ 220.853839] ? kasan_check_read+0x11/0x20 [ 220.857993] ? lock_acquire+0x1ed/0x520 [ 220.861970] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 220.866996] ? preempt_count_add+0x7d/0x160 [ 220.871318] ? lock_release+0x970/0x970 [ 220.875282] ? kvm_gen_update_masterclock+0x350/0x350 [ 220.880474] ? kvm_arch_dev_ioctl+0x630/0x630 [ 220.884970] ? preempt_notifier_dec+0x20/0x20 [ 220.889473] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 220.894324] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 220.899344] kvm_vcpu_ioctl+0x72b/0x1150 [ 220.903397] ? kvm_vcpu_block+0x1030/0x1030 [ 220.907713] ? __fget+0x4aa/0x740 [ 220.911167] ? __f_unlock_pos+0x19/0x20 [ 220.915150] ? __fget+0x4d1/0x740 [ 220.918589] ? ksys_dup3+0x680/0x680 [ 220.922290] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 220.927203] ? fsnotify+0xaae/0x12f0 [ 220.930914] ? kvm_vcpu_block+0x1030/0x1030 [ 220.935231] do_vfs_ioctl+0x1de/0x1720 [ 220.939111] ? fsnotify_first_mark+0x350/0x350 [ 220.943676] ? __fsnotify_parent+0xcc/0x420 [ 220.947980] ? ioctl_preallocate+0x300/0x300 [ 220.952373] ? __fget_light+0x2e9/0x430 [ 220.956335] ? fget_raw+0x20/0x20 [ 220.959771] ? __sb_end_write+0xd9/0x110 [ 220.963817] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 220.969339] ? fput+0x130/0x1a0 [ 220.972613] ? ksys_write+0x1ae/0x260 [ 220.976401] ? security_file_ioctl+0x94/0xc0 [ 220.980797] ksys_ioctl+0xa9/0xd0 [ 220.984235] __x64_sys_ioctl+0x73/0xb0 [ 220.988109] do_syscall_64+0x1b9/0x820 [ 220.991982] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 220.997341] ? syscall_return_slowpath+0x5e0/0x5e0 [ 221.002257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.007086] ? trace_hardirqs_on_caller+0x310/0x310 [ 221.012092] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 221.017096] ? prepare_exit_to_usermode+0x291/0x3b0 [ 221.022109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.026938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.032109] RIP: 0033:0x457579 [ 221.035290] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.054190] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.061900] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 221.069159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 221.076411] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 221.084020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 221.091277] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x30, 0x4, 0x0, {0x5, 0x50, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) r3 = dup3(r0, r1, 0xb422fcacacda4a5) getsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000100)={0x6e, @rand_addr=0x5, 0x4e23, 0x3, 'sed\x00', 0x10, 0x9, 0x1}, 0x2c) 23:44:36 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xb00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x101}, 0x14}}, 0x0) 23:44:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5525) 23:44:36 executing program 4 (fault-call:7 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000080)) 23:44:36 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 23:44:36 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) [ 221.442024] FAULT_INJECTION: forcing a failure. [ 221.442024] name failslab, interval 1, probability 0, space 0, times 0 [ 221.469231] CPU: 0 PID: 9385 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 221.476562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.485926] Call Trace: [ 221.488542] dump_stack+0x1c4/0x2b4 23:44:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='hugetlbfs\x00', 0x0, &(0x7f0000000140)='posix_acl_access\'\x00') 23:44:36 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe4ffffff, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 221.492194] ? dump_stack_print_info.cold.2+0x52/0x52 [ 221.497400] ? __kernel_text_address+0xd/0x40 [ 221.501912] ? unwind_get_return_address+0x61/0xa0 [ 221.506862] should_fail.cold.4+0xa/0x17 [ 221.510941] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 221.516047] ? save_stack+0xa9/0xd0 [ 221.519664] ? kasan_kmalloc+0xc7/0xe0 [ 221.519674] ? kasan_slab_alloc+0x12/0x20 [ 221.519687] ? kmem_cache_alloc+0x12e/0x730 [ 221.519701] ? mmu_topup_memory_caches+0xf7/0x390 [ 221.519712] ? kvm_mmu_load+0x21/0xfa0 [ 221.519730] ? vcpu_enter_guest+0x3dbe/0x6380 [ 221.540753] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 221.550243] ? do_vfs_ioctl+0x1de/0x1720 [ 221.554319] ? ksys_ioctl+0xa9/0xd0 [ 221.557946] ? __x64_sys_ioctl+0x73/0xb0 [ 221.557967] ? do_syscall_64+0x1b9/0x820 [ 221.566073] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.571449] ? percpu_ref_put_many+0x11c/0x260 [ 221.576052] ? lock_downgrade+0x900/0x900 [ 221.580213] ? lock_release+0x970/0x970 [ 221.584197] ? fs_reclaim_acquire+0x20/0x20 [ 221.588526] ? lock_downgrade+0x900/0x900 [ 221.592690] ? ___might_sleep+0x1ed/0x300 [ 221.596862] ? arch_local_save_flags+0x40/0x40 [ 221.601545] ? percpu_ref_put_many+0x13e/0x260 [ 221.606138] ? trace_hardirqs_on+0xbd/0x310 [ 221.610492] __should_failslab+0x124/0x180 [ 221.614730] should_failslab+0x9/0x14 [ 221.618549] kmem_cache_alloc+0x2be/0x730 [ 221.622705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 221.628325] ? kvm_pfn_to_page+0x7a/0xa0 [ 221.632394] ? mmu_topup_memory_caches+0xf7/0x390 [ 221.637246] mmu_topup_memory_caches+0xf7/0x390 [ 221.641930] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 221.647463] kvm_mmu_load+0x21/0xfa0 [ 221.651165] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 221.656081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.661840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 221.667376] vcpu_enter_guest+0x3dbe/0x6380 [ 221.672118] ? emulator_read_emulated+0x50/0x50 [ 221.676767] ? vmx_vcpu_load+0xb06/0x1030 [ 221.680899] ? mark_held_locks+0x130/0x130 [ 221.685115] ? vmx_write_tsc_offset+0x680/0x680 [ 221.689767] ? lock_downgrade+0x900/0x900 [ 221.693896] ? kasan_check_read+0x11/0x20 [ 221.698148] ? lock_acquire+0x1ed/0x520 [ 221.702105] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 221.707104] ? preempt_count_add+0x7d/0x160 [ 221.711409] ? lock_release+0x970/0x970 [ 221.715365] ? kvm_gen_update_masterclock+0x350/0x350 [ 221.720542] ? kvm_arch_dev_ioctl+0x630/0x630 [ 221.725017] ? preempt_notifier_dec+0x20/0x20 [ 221.729497] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 221.734319] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 221.739329] kvm_vcpu_ioctl+0x72b/0x1150 [ 221.743377] ? kvm_vcpu_block+0x1030/0x1030 [ 221.747685] ? __fget+0x4aa/0x740 [ 221.751128] ? __f_unlock_pos+0x19/0x20 [ 221.755085] ? __fget+0x4d1/0x740 [ 221.758519] ? ksys_dup3+0x680/0x680 [ 221.762220] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 221.767139] ? fsnotify+0xaae/0x12f0 [ 221.770836] ? kvm_vcpu_block+0x1030/0x1030 [ 221.775146] do_vfs_ioctl+0x1de/0x1720 [ 221.779015] ? fsnotify_first_mark+0x350/0x350 [ 221.783584] ? __fsnotify_parent+0xcc/0x420 [ 221.787898] ? ioctl_preallocate+0x300/0x300 [ 221.792304] ? __fget_light+0x2e9/0x430 [ 221.796259] ? fget_raw+0x20/0x20 [ 221.799708] ? __sb_end_write+0xd9/0x110 [ 221.803759] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 221.809291] ? fput+0x130/0x1a0 [ 221.812561] ? ksys_write+0x1ae/0x260 [ 221.816351] ? security_file_ioctl+0x94/0xc0 [ 221.820766] ksys_ioctl+0xa9/0xd0 [ 221.824213] __x64_sys_ioctl+0x73/0xb0 [ 221.828083] do_syscall_64+0x1b9/0x820 [ 221.831975] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 221.837326] ? syscall_return_slowpath+0x5e0/0x5e0 [ 221.842236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.847065] ? trace_hardirqs_on_caller+0x310/0x310 [ 221.852087] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 221.857089] ? prepare_exit_to_usermode+0x291/0x3b0 [ 221.862107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 221.866937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.872128] RIP: 0033:0x457579 [ 221.875306] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.894192] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.901883] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 221.909134] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 221.916948] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 221.924202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 221.931455] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 23:44:37 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xc000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x2) 23:44:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x40000000000000, 0x2a4400) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x72e, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000240)="b66bc0e5e5b45b49a26a69e70bfedf9627944bf03e012bef6bf74f3049b6ffaa9914557d49ec8112", &(0x7f0000001080)="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", 0x2}, 0x20) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x5, 0x2}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) process_vm_writev(0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/167, 0xa7}], 0x4, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/90, 0x5a}, {&(0x7f00000008c0)=""/222, 0xde}], 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xfffffffffffffe81) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0xa, 0x1, 0x1, 0x2, 'syz0\x00', 0x7}, 0x0, 0x261, 0x2, r2, 0x1, 0x1ff, 'syz1\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00'], 0x13, [], [0xffffffffffffffe0, 0x89, 0x57da, 0x2]}) 23:44:37 executing program 4 (fault-call:7 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5507) 23:44:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x601, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff843}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc4f7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5511}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000811) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:37 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x300, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 222.263927] FAULT_INJECTION: forcing a failure. [ 222.263927] name failslab, interval 1, probability 0, space 0, times 0 [ 222.275525] CPU: 1 PID: 9420 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 222.282815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.292171] Call Trace: [ 222.294775] dump_stack+0x1c4/0x2b4 [ 222.298428] ? dump_stack_print_info.cold.2+0x52/0x52 [ 222.303636] ? __kernel_text_address+0xd/0x40 [ 222.308153] ? unwind_get_return_address+0x61/0xa0 23:44:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair(0x10, 0x801, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/27) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000000c0)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000500)=0x5, 0x4) [ 222.313110] should_fail.cold.4+0xa/0x17 [ 222.317186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 222.322292] ? save_stack+0xa9/0xd0 [ 222.325930] ? kasan_kmalloc+0xc7/0xe0 [ 222.329804] ? kasan_slab_alloc+0x12/0x20 [ 222.329816] ? kmem_cache_alloc+0x12e/0x730 [ 222.329830] ? mmu_topup_memory_caches+0xf7/0x390 [ 222.329839] ? kvm_mmu_load+0x21/0xfa0 [ 222.329853] ? vcpu_enter_guest+0x3dbe/0x6380 [ 222.329863] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 222.329880] ? do_vfs_ioctl+0x1de/0x1720 [ 222.343271] ? ksys_ioctl+0xa9/0xd0 [ 222.343284] ? __x64_sys_ioctl+0x73/0xb0 [ 222.343303] ? do_syscall_64+0x1b9/0x820 [ 222.351657] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.351671] ? percpu_ref_put_many+0x11c/0x260 [ 222.351693] ? lock_downgrade+0x900/0x900 [ 222.351706] ? lock_release+0x970/0x970 [ 222.351721] ? fs_reclaim_acquire+0x20/0x20 [ 222.351736] ? lock_downgrade+0x900/0x900 [ 222.364399] ? lock_downgrade+0x900/0x900 [ 222.372501] ? ___might_sleep+0x1ed/0x300 [ 222.390507] ? arch_local_save_flags+0x40/0x40 23:44:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r1, 0x2, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x140fff) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x3, 0x7}, 'port0\x00', 0x1, 0x0, 0x800, 0x1, 0x6, 0x10001, 0x3, 0x0, 0x1, 0x4}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 222.390520] ? percpu_ref_put_many+0x13e/0x260 [ 222.390532] ? trace_hardirqs_on+0xbd/0x310 [ 222.390560] __should_failslab+0x124/0x180 [ 222.411858] should_failslab+0x9/0x14 [ 222.411875] kmem_cache_alloc+0x2be/0x730 [ 222.411893] ? mmu_topup_memory_caches+0xf7/0x390 [ 222.437789] mmu_topup_memory_caches+0xf7/0x390 [ 222.442484] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 222.442503] kvm_mmu_load+0x21/0xfa0 [ 222.451812] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 222.456744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:44:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x406855c9) [ 222.462284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 222.462303] vcpu_enter_guest+0x3dbe/0x6380 [ 222.462322] ? emulator_read_emulated+0x50/0x50 [ 222.462338] ? vmx_vcpu_load+0xb06/0x1030 [ 222.462350] ? mark_held_locks+0x130/0x130 [ 222.462366] ? vmx_write_tsc_offset+0x680/0x680 [ 222.489875] ? lock_downgrade+0x900/0x900 [ 222.494044] ? kasan_check_read+0x11/0x20 [ 222.498208] ? lock_acquire+0x1ed/0x520 [ 222.502190] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 222.507208] ? preempt_count_add+0x7d/0x160 [ 222.507226] ? lock_release+0x970/0x970 [ 222.515499] ? kvm_gen_update_masterclock+0x350/0x350 [ 222.520700] ? kvm_arch_dev_ioctl+0x630/0x630 [ 222.525211] ? preempt_notifier_dec+0x20/0x20 [ 222.529723] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 222.529736] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 222.529755] kvm_vcpu_ioctl+0x72b/0x1150 [ 222.529770] ? kvm_vcpu_block+0x1030/0x1030 [ 222.529790] ? __fget+0x4aa/0x740 [ 222.529812] ? __f_unlock_pos+0x19/0x20 [ 222.548009] ? __fget+0x4d1/0x740 [ 222.548026] ? ksys_dup3+0x680/0x680 [ 222.562653] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 222.562671] ? fsnotify+0xaae/0x12f0 [ 222.571298] ? kvm_vcpu_block+0x1030/0x1030 [ 222.575646] do_vfs_ioctl+0x1de/0x1720 [ 222.575661] ? fsnotify_first_mark+0x350/0x350 [ 222.575677] ? __fsnotify_parent+0xcc/0x420 [ 222.588434] ? ioctl_preallocate+0x300/0x300 [ 222.592851] ? __fget_light+0x2e9/0x430 [ 222.596822] ? fget_raw+0x20/0x20 [ 222.596837] ? __sb_end_write+0xd9/0x110 [ 222.596855] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 222.609865] ? fput+0x130/0x1a0 [ 222.609881] ? ksys_write+0x1ae/0x260 [ 222.609915] ? security_file_ioctl+0x94/0xc0 [ 222.609929] ksys_ioctl+0xa9/0xd0 [ 222.609945] __x64_sys_ioctl+0x73/0xb0 [ 222.616996] do_syscall_64+0x1b9/0x820 [ 222.617010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 222.617028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 222.643393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.648258] ? trace_hardirqs_on_caller+0x310/0x310 [ 222.653287] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 222.658307] ? prepare_exit_to_usermode+0x291/0x3b0 [ 222.663313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 222.668143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 222.673317] RIP: 0033:0x457579 [ 222.676497] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 222.695472] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.703168] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 222.710462] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 222.717717] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 222.724972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 222.732223] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff07, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80807, 0x8) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x3}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) 23:44:38 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 23:44:38 executing program 4 (fault-call:7 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:38 executing program 2: getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 23:44:38 executing program 0: r0 = socket$inet(0x2, 0x0, 0xc8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) clock_getres(0x3, &(0x7f0000000000)) 23:44:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:44:38 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xf000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) [ 223.146135] FAULT_INJECTION: forcing a failure. [ 223.146135] name failslab, interval 1, probability 0, space 0, times 0 [ 223.212043] CPU: 0 PID: 9471 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 223.219372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.228860] Call Trace: [ 223.231469] dump_stack+0x1c4/0x2b4 [ 223.235112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 223.235132] ? __kernel_text_address+0xd/0x40 [ 223.244798] ? unwind_get_return_address+0x61/0xa0 [ 223.244819] should_fail.cold.4+0xa/0x17 [ 223.253789] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 223.258903] ? save_stack+0xa9/0xd0 [ 223.262543] ? kasan_kmalloc+0xc7/0xe0 [ 223.266429] ? kasan_slab_alloc+0x12/0x20 [ 223.270569] ? kmem_cache_alloc+0x12e/0x730 [ 223.270584] ? mmu_topup_memory_caches+0xf7/0x390 [ 223.270594] ? kvm_mmu_load+0x21/0xfa0 [ 223.270608] ? vcpu_enter_guest+0x3dbe/0x6380 [ 223.270619] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 223.270632] ? do_vfs_ioctl+0x1de/0x1720 [ 223.270647] ? ksys_ioctl+0xa9/0xd0 [ 223.279789] ? __x64_sys_ioctl+0x73/0xb0 [ 223.279804] ? do_syscall_64+0x1b9/0x820 [ 223.279817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.279832] ? percpu_ref_put_many+0x11c/0x260 [ 223.279846] ? lock_downgrade+0x900/0x900 [ 223.279863] ? lock_release+0x970/0x970 [ 223.288233] ? fs_reclaim_acquire+0x20/0x20 [ 223.288253] ? lock_downgrade+0x900/0x900 [ 223.297304] ? ___might_sleep+0x1ed/0x300 [ 223.297318] ? arch_local_save_flags+0x40/0x40 [ 223.297335] ? percpu_ref_put_many+0x13e/0x260 [ 223.304991] ? trace_hardirqs_on+0xbd/0x310 [ 223.305013] __should_failslab+0x124/0x180 [ 223.305028] should_failslab+0x9/0x14 23:44:38 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x13000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000012003b0e000000000000000000000000", @ANYRES32=0x0], 0x2}, 0x1, 0x0, 0x0, 0x850}, 0x80) [ 223.339712] kmem_cache_alloc+0x2be/0x730 [ 223.339731] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 223.339744] ? kvm_pfn_to_page+0x7a/0xa0 [ 223.339759] ? mmu_topup_memory_caches+0xf7/0x390 [ 223.339777] mmu_topup_memory_caches+0xf7/0x390 [ 223.348913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 223.389950] kvm_mmu_load+0x21/0xfa0 [ 223.393677] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 223.398624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.404174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 223.409739] vcpu_enter_guest+0x3dbe/0x6380 [ 223.414080] ? emulator_read_emulated+0x50/0x50 [ 223.418761] ? vmx_vcpu_load+0xb06/0x1030 [ 223.422920] ? mark_held_locks+0x130/0x130 [ 223.422942] ? vmx_write_tsc_offset+0x680/0x680 [ 223.431817] ? lock_downgrade+0x900/0x900 [ 223.431830] ? kasan_check_read+0x11/0x20 [ 223.431852] ? lock_acquire+0x1ed/0x520 [ 223.431866] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 223.431887] ? preempt_count_add+0x7d/0x160 [ 223.453430] ? lock_release+0x970/0x970 [ 223.457420] ? kvm_gen_update_masterclock+0x350/0x350 [ 223.462628] ? kvm_arch_dev_ioctl+0x630/0x630 [ 223.467240] ? preempt_notifier_dec+0x20/0x20 [ 223.471755] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 223.476604] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 223.481637] kvm_vcpu_ioctl+0x72b/0x1150 [ 223.485694] ? kvm_vcpu_block+0x1030/0x1030 [ 223.490010] ? __fget+0x4aa/0x740 [ 223.493453] ? __f_unlock_pos+0x19/0x20 [ 223.497417] ? __fget+0x4d1/0x740 [ 223.500859] ? ksys_dup3+0x680/0x680 [ 223.504562] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 223.509477] ? fsnotify+0xaae/0x12f0 [ 223.513200] ? kvm_vcpu_block+0x1030/0x1030 [ 223.517523] do_vfs_ioctl+0x1de/0x1720 [ 223.521406] ? fsnotify_first_mark+0x350/0x350 [ 223.525975] ? __fsnotify_parent+0xcc/0x420 [ 223.530291] ? ioctl_preallocate+0x300/0x300 [ 223.534686] ? __fget_light+0x2e9/0x430 [ 223.538647] ? fget_raw+0x20/0x20 [ 223.542093] ? __sb_end_write+0xd9/0x110 [ 223.546150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 223.551799] ? fput+0x130/0x1a0 [ 223.555064] ? ksys_write+0x1ae/0x260 [ 223.558852] ? security_file_ioctl+0x94/0xc0 [ 223.563252] ksys_ioctl+0xa9/0xd0 [ 223.566698] __x64_sys_ioctl+0x73/0xb0 [ 223.570573] do_syscall_64+0x1b9/0x820 [ 223.574443] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 223.579793] ? syscall_return_slowpath+0x5e0/0x5e0 [ 223.584705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.589532] ? trace_hardirqs_on_caller+0x310/0x310 [ 223.594536] ? prepare_exit_to_usermode+0x291/0x3b0 [ 223.599543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.604378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.609553] RIP: 0033:0x457579 [ 223.612734] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.631707] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.639398] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 223.646652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 223.653910] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 223.661205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 223.668463] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:39 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000680)={0x29, 0x4, 0x0, {0x4, 0x3a, 0x1, 0x0, [0x0]}}, 0x29) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb10c, 0x420000) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1, 0x3, 0x4, 0x7f, 'syz1\x00', 0xa54}, 0x6, 0x30000029, 0x0, r3, 0x2, 0x20, 'syz0\x00', &(0x7f0000000040)=['\x00', '\x00'], 0x2, [], [0x7, 0x1ff, 0x5, 0x4]}) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x10000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x40405515, &(0x7f0000001000)) 23:44:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:44:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:39 executing program 4 (fault-call:7 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:39 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x400000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045568) 23:44:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 224.047899] FAULT_INJECTION: forcing a failure. [ 224.047899] name failslab, interval 1, probability 0, space 0, times 0 [ 224.075113] CPU: 0 PID: 9527 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 224.082533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.082538] Call Trace: [ 224.082566] dump_stack+0x1c4/0x2b4 23:44:39 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x11, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 224.098135] ? dump_stack_print_info.cold.2+0x52/0x52 [ 224.103364] ? __kernel_text_address+0xd/0x40 [ 224.107876] ? unwind_get_return_address+0x61/0xa0 [ 224.112827] should_fail.cold.4+0xa/0x17 [ 224.116900] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 224.116917] ? save_stack+0xa9/0xd0 [ 224.125716] ? kasan_kmalloc+0xc7/0xe0 [ 224.129614] ? kasan_slab_alloc+0x12/0x20 [ 224.133774] ? kmem_cache_alloc+0x12e/0x730 [ 224.138102] ? mmu_topup_memory_caches+0xf7/0x390 [ 224.142935] ? kvm_mmu_load+0x21/0xfa0 [ 224.146817] ? vcpu_enter_guest+0x3dbe/0x6380 [ 224.151302] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.156321] ? do_vfs_ioctl+0x1de/0x1720 [ 224.160367] ? ksys_ioctl+0xa9/0xd0 [ 224.163979] ? __x64_sys_ioctl+0x73/0xb0 [ 224.168026] ? do_syscall_64+0x1b9/0x820 [ 224.172173] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.177524] ? percpu_ref_put_many+0x11c/0x260 [ 224.182093] ? lock_downgrade+0x900/0x900 [ 224.186229] ? lock_release+0x970/0x970 [ 224.190193] ? fs_reclaim_acquire+0x20/0x20 [ 224.194499] ? lock_downgrade+0x900/0x900 [ 224.198639] ? ___might_sleep+0x1ed/0x300 [ 224.202776] ? arch_local_save_flags+0x40/0x40 [ 224.207344] ? percpu_ref_put_many+0x13e/0x260 [ 224.211916] ? trace_hardirqs_on+0xbd/0x310 [ 224.216227] __should_failslab+0x124/0x180 [ 224.220452] should_failslab+0x9/0x14 [ 224.224242] kmem_cache_alloc+0x2be/0x730 [ 224.228380] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 224.233919] ? kvm_pfn_to_page+0x7a/0xa0 [ 224.237967] ? mmu_topup_memory_caches+0xf7/0x390 [ 224.242803] mmu_topup_memory_caches+0xf7/0x390 [ 224.247461] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 224.252996] kvm_mmu_load+0x21/0xfa0 [ 224.256720] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 224.263113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.268645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.274176] vcpu_enter_guest+0x3dbe/0x6380 [ 224.278487] ? __phys_addr+0xa6/0x120 [ 224.282281] ? emulator_read_emulated+0x50/0x50 [ 224.286945] ? check_preemption_disabled+0x48/0x200 [ 224.291954] ? vmx_vcpu_load+0xb06/0x1030 [ 224.296091] ? vmx_write_tsc_offset+0x680/0x680 [ 224.300750] ? lock_downgrade+0x900/0x900 [ 224.304884] ? kasan_check_read+0x11/0x20 [ 224.309027] ? lock_acquire+0x1ed/0x520 [ 224.312988] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 224.317991] ? preempt_count_add+0x7d/0x160 [ 224.322323] ? lock_release+0x970/0x970 [ 224.326282] ? kvm_gen_update_masterclock+0x350/0x350 [ 224.331464] ? kvm_arch_dev_ioctl+0x630/0x630 [ 224.335942] ? preempt_notifier_dec+0x20/0x20 [ 224.340430] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.345277] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.350289] kvm_vcpu_ioctl+0x72b/0x1150 [ 224.354343] ? kvm_vcpu_block+0x1030/0x1030 [ 224.358659] ? __fget+0x4aa/0x740 [ 224.362107] ? __f_unlock_pos+0x19/0x20 [ 224.366075] ? __fget+0x4d1/0x740 [ 224.369517] ? ksys_dup3+0x680/0x680 [ 224.373233] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 224.378156] ? fsnotify+0xaae/0x12f0 [ 224.381862] ? kvm_vcpu_block+0x1030/0x1030 [ 224.386172] do_vfs_ioctl+0x1de/0x1720 [ 224.390045] ? fsnotify_first_mark+0x350/0x350 [ 224.394612] ? __fsnotify_parent+0xcc/0x420 [ 224.398920] ? ioctl_preallocate+0x300/0x300 [ 224.403316] ? __fget_light+0x2e9/0x430 [ 224.407276] ? fget_raw+0x20/0x20 [ 224.410718] ? __sb_end_write+0xd9/0x110 [ 224.414769] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 224.420295] ? fput+0x130/0x1a0 [ 224.423562] ? ksys_write+0x1ae/0x260 [ 224.427352] ? security_file_ioctl+0x94/0xc0 [ 224.431944] ksys_ioctl+0xa9/0xd0 [ 224.435392] __x64_sys_ioctl+0x73/0xb0 [ 224.439270] do_syscall_64+0x1b9/0x820 [ 224.443157] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 224.448509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 224.453425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 224.458265] ? trace_hardirqs_on_caller+0x310/0x310 [ 224.463275] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 224.468282] ? prepare_exit_to_usermode+0x291/0x3b0 [ 224.473308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 224.478159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.483339] RIP: 0033:0x457579 [ 224.486534] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.505515] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.513230] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 224.520489] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 224.527749] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 224.535006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 224.542271] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:39 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x3, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5452) 23:44:39 executing program 4 (fault-call:7 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 224.687065] FAULT_INJECTION: forcing a failure. [ 224.687065] name failslab, interval 1, probability 0, space 0, times 0 [ 224.698836] CPU: 1 PID: 9561 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 224.706130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.715476] Call Trace: [ 224.718061] dump_stack+0x1c4/0x2b4 [ 224.721685] ? dump_stack_print_info.cold.2+0x52/0x52 [ 224.726866] ? __kernel_text_address+0xd/0x40 [ 224.731352] ? unwind_get_return_address+0x61/0xa0 [ 224.736272] should_fail.cold.4+0xa/0x17 [ 224.740326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 224.745416] ? save_stack+0xa9/0xd0 [ 224.749026] ? kasan_kmalloc+0xc7/0xe0 [ 224.752912] ? kasan_slab_alloc+0x12/0x20 [ 224.757049] ? kmem_cache_alloc+0x12e/0x730 [ 224.761364] ? mmu_topup_memory_caches+0xf7/0x390 [ 224.766198] ? kvm_mmu_load+0x21/0xfa0 [ 224.770068] ? vcpu_enter_guest+0x3dbe/0x6380 [ 224.774556] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.779585] ? do_vfs_ioctl+0x1de/0x1720 [ 224.783630] ? ksys_ioctl+0xa9/0xd0 [ 224.787241] ? __x64_sys_ioctl+0x73/0xb0 [ 224.791288] ? do_syscall_64+0x1b9/0x820 [ 224.795340] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 224.800703] ? percpu_ref_put_many+0x11c/0x260 [ 224.805274] ? lock_downgrade+0x900/0x900 [ 224.809440] ? lock_release+0x970/0x970 [ 224.813414] ? fs_reclaim_acquire+0x20/0x20 [ 224.817718] ? lock_downgrade+0x900/0x900 [ 224.821850] ? ___might_sleep+0x1ed/0x300 [ 224.825985] ? arch_local_save_flags+0x40/0x40 [ 224.830599] ? percpu_ref_put_many+0x13e/0x260 [ 224.835165] ? trace_hardirqs_on+0xbd/0x310 [ 224.839476] __should_failslab+0x124/0x180 [ 224.843696] should_failslab+0x9/0x14 [ 224.847481] kmem_cache_alloc+0x2be/0x730 [ 224.851614] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 224.857137] ? kvm_pfn_to_page+0x7a/0xa0 [ 224.861185] ? mmu_topup_memory_caches+0xf7/0x390 [ 224.866023] mmu_topup_memory_caches+0xf7/0x390 [ 224.870682] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 224.876257] kvm_mmu_load+0x21/0xfa0 [ 224.880007] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 224.884928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.890455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 224.895981] vcpu_enter_guest+0x3dbe/0x6380 [ 224.900299] ? emulator_read_emulated+0x50/0x50 [ 224.904957] ? vmx_vcpu_load+0xb06/0x1030 [ 224.909091] ? mark_held_locks+0x130/0x130 [ 224.913318] ? vmx_write_tsc_offset+0x680/0x680 [ 224.917971] ? lock_downgrade+0x900/0x900 [ 224.922112] ? kasan_check_read+0x11/0x20 [ 224.926250] ? lock_acquire+0x1ed/0x520 [ 224.930215] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 224.935220] ? preempt_count_add+0x7d/0x160 [ 224.939526] ? lock_release+0x970/0x970 [ 224.943493] ? kvm_gen_update_masterclock+0x350/0x350 [ 224.948680] ? kvm_arch_dev_ioctl+0x630/0x630 [ 224.953157] ? preempt_notifier_dec+0x20/0x20 [ 224.957644] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.962479] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 224.967493] kvm_vcpu_ioctl+0x72b/0x1150 [ 224.971552] ? kvm_vcpu_block+0x1030/0x1030 [ 224.975864] ? __fget+0x4aa/0x740 [ 224.979402] ? __f_unlock_pos+0x19/0x20 [ 224.983374] ? __fget+0x4d1/0x740 [ 224.986814] ? ksys_dup3+0x680/0x680 [ 224.990521] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 224.995444] ? fsnotify+0xaae/0x12f0 [ 224.999154] ? kvm_vcpu_block+0x1030/0x1030 [ 225.003458] do_vfs_ioctl+0x1de/0x1720 [ 225.007333] ? fsnotify_first_mark+0x350/0x350 [ 225.011899] ? __fsnotify_parent+0xcc/0x420 [ 225.016213] ? ioctl_preallocate+0x300/0x300 [ 225.020627] ? __fget_light+0x2e9/0x430 [ 225.024588] ? fget_raw+0x20/0x20 [ 225.028025] ? __sb_end_write+0xd9/0x110 [ 225.032075] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 225.037605] ? fput+0x130/0x1a0 [ 225.040871] ? ksys_write+0x1ae/0x260 [ 225.044666] ? security_file_ioctl+0x94/0xc0 [ 225.049062] ksys_ioctl+0xa9/0xd0 [ 225.052501] __x64_sys_ioctl+0x73/0xb0 [ 225.056375] do_syscall_64+0x1b9/0x820 [ 225.060249] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 225.065597] ? syscall_return_slowpath+0x5e0/0x5e0 [ 225.070510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.075358] ? trace_hardirqs_on_caller+0x310/0x310 [ 225.080367] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 225.085372] ? prepare_exit_to_usermode+0x291/0x3b0 [ 225.090552] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.095385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.100569] RIP: 0033:0x457579 [ 225.103750] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.122659] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.131067] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 23:44:40 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xf, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x204) r1 = shmat(0xffffffffffffffff, &(0x7f0000001000/0x4000)=nil, 0x4000) shmdt(r1) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000080)) [ 225.138331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 225.145590] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.152855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 225.160117] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x8002) 23:44:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:40 executing program 4 (fault-call:7 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:40 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:40 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x401) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000040)=0x3, 0x4) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xff02) [ 225.291388] FAULT_INJECTION: forcing a failure. [ 225.291388] name failslab, interval 1, probability 0, space 0, times 0 [ 225.347646] CPU: 0 PID: 9583 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 225.355053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.364529] Call Trace: [ 225.367135] dump_stack+0x1c4/0x2b4 [ 225.370786] ? dump_stack_print_info.cold.2+0x52/0x52 [ 225.375998] ? __kernel_text_address+0xd/0x40 [ 225.380513] ? unwind_get_return_address+0x61/0xa0 [ 225.385468] should_fail.cold.4+0xa/0x17 [ 225.389549] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 225.394667] ? save_stack+0xa9/0xd0 [ 225.398302] ? kasan_kmalloc+0xc7/0xe0 [ 225.402205] ? kasan_slab_alloc+0x12/0x20 [ 225.406371] ? kmem_cache_alloc+0x12e/0x730 [ 225.410706] ? mmu_topup_memory_caches+0xf7/0x390 [ 225.415558] ? kvm_mmu_load+0x21/0xfa0 [ 225.419457] ? vcpu_enter_guest+0x3dbe/0x6380 [ 225.423960] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 225.428994] ? do_vfs_ioctl+0x1de/0x1720 [ 225.433086] ? ksys_ioctl+0xa9/0xd0 [ 225.436730] ? __x64_sys_ioctl+0x73/0xb0 [ 225.440806] ? do_syscall_64+0x1b9/0x820 [ 225.444876] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.450255] ? percpu_ref_put_many+0x11c/0x260 [ 225.454854] ? lock_downgrade+0x900/0x900 [ 225.459011] ? lock_release+0x970/0x970 [ 225.462993] ? fs_reclaim_acquire+0x20/0x20 [ 225.463013] ? lock_downgrade+0x900/0x900 [ 225.471453] ? ___might_sleep+0x1ed/0x300 [ 225.471467] ? arch_local_save_flags+0x40/0x40 [ 225.471480] ? percpu_ref_put_many+0x13e/0x260 [ 225.471498] ? trace_hardirqs_on+0xbd/0x310 [ 225.480207] __should_failslab+0x124/0x180 [ 225.493315] should_failslab+0x9/0x14 [ 225.493332] kmem_cache_alloc+0x2be/0x730 [ 225.493351] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 225.506807] ? kvm_pfn_to_page+0x7a/0xa0 [ 225.506823] ? mmu_topup_memory_caches+0xf7/0x390 [ 225.506841] mmu_topup_memory_caches+0xf7/0x390 [ 225.520603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 225.526147] kvm_mmu_load+0x21/0xfa0 [ 225.526163] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 225.526181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.534806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:44:40 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) r2 = socket(0x7, 0x6, 0xb0a5) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e20, @local}}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x4, 0x6, 0x6, 0x8b, &(0x7f0000000100)=""/139, 0x40, &(0x7f0000000080)=""/64, 0x2d, &(0x7f00000001c0)=""/45}) 23:44:40 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200300) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x44000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000080)) 23:44:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 225.534828] vcpu_enter_guest+0x3dbe/0x6380 [ 225.545884] ? emulator_read_emulated+0x50/0x50 [ 225.545902] ? vmx_vcpu_load+0xb06/0x1030 [ 225.559012] ? finish_task_switch+0x1f5/0x900 [ 225.563526] ? finish_task_switch+0x1b5/0x900 [ 225.568042] ? __switch_to_asm+0x34/0x70 [ 225.572134] ? vmx_write_tsc_offset+0x680/0x680 [ 225.576814] ? __switch_to_asm+0x34/0x70 [ 225.580882] ? __switch_to_asm+0x34/0x70 [ 225.584953] ? __switch_to_asm+0x40/0x70 [ 225.589022] ? __switch_to_asm+0x34/0x70 [ 225.593099] ? __switch_to_asm+0x40/0x70 [ 225.597356] ? __switch_to_asm+0x34/0x70 [ 225.601428] ? __switch_to_asm+0x40/0x70 [ 225.605538] ? __switch_to_asm+0x34/0x70 [ 225.609588] ? __switch_to_asm+0x34/0x70 [ 225.613636] ? __switch_to_asm+0x34/0x70 [ 225.617692] ? lock_acquire+0x1ed/0x520 [ 225.621668] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 225.626671] ? preempt_count_add+0x7d/0x160 [ 225.630979] ? lock_release+0x970/0x970 [ 225.634941] ? kvm_gen_update_masterclock+0x350/0x350 [ 225.640116] ? kvm_arch_dev_ioctl+0x630/0x630 [ 225.644599] ? preempt_notifier_dec+0x20/0x20 [ 225.649087] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 225.653914] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 225.658956] kvm_vcpu_ioctl+0x72b/0x1150 [ 225.663002] ? kvm_vcpu_block+0x1030/0x1030 [ 225.667315] ? __fget+0x4aa/0x740 [ 225.670754] ? __f_unlock_pos+0x19/0x20 [ 225.674714] ? __fget+0x4d1/0x740 [ 225.678444] ? ksys_dup3+0x680/0x680 [ 225.682145] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 225.687066] ? fsnotify+0xaae/0x12f0 [ 225.690770] ? kvm_vcpu_block+0x1030/0x1030 [ 225.695078] do_vfs_ioctl+0x1de/0x1720 [ 225.698950] ? fsnotify_first_mark+0x350/0x350 [ 225.703516] ? __fsnotify_parent+0xcc/0x420 [ 225.707824] ? ioctl_preallocate+0x300/0x300 [ 225.712215] ? __fget_light+0x2e9/0x430 [ 225.716176] ? fget_raw+0x20/0x20 [ 225.719620] ? __sb_end_write+0xd9/0x110 [ 225.723667] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 225.729184] ? fput+0x130/0x1a0 [ 225.732453] ? ksys_write+0x1ae/0x260 [ 225.736241] ? security_file_ioctl+0x94/0xc0 [ 225.740638] ksys_ioctl+0xa9/0xd0 [ 225.744080] __x64_sys_ioctl+0x73/0xb0 [ 225.748558] do_syscall_64+0x1b9/0x820 [ 225.752443] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 225.757812] ? syscall_return_slowpath+0x5e0/0x5e0 [ 225.762736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.767566] ? trace_hardirqs_on_caller+0x310/0x310 [ 225.772601] ? prepare_exit_to_usermode+0x291/0x3b0 [ 225.777610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 225.782440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.787612] RIP: 0033:0x457579 [ 225.790790] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.809692] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.817390] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 225.824651] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 225.831926] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.839185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 225.846450] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:41 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x80, 0x800) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001080)={0x10b0, 0x2a, 0x300, 0x70bd2a, 0x25dfdbff, {0x19}, [@typed={0x8, 0x42, @uid=r2}, @typed={0x94, 0x4f, @binary="ce46a9b8131e4369571dfae1da496cd0301d87c95d0b6a11f496bc28bdcfe718b731e45cbd196485ed121a2527043b53cd7e95f88093cbf1b42f508bdd1be41e18952ebb836c45072cfaad52fbb7411452664bf02f77222b4fdb01e157b53d0f05ac732a85709ac792c5823c10d2440da0e12595aa89bced3fc562531086bb30a978a7a43acadfa91ec9f24e6099"}, @generic="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"]}, 0x10b0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:41 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045569) 23:44:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:41 executing program 4 (fault-call:7 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x4, 0x900) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000080)) 23:44:41 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x40000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 226.202699] FAULT_INJECTION: forcing a failure. [ 226.202699] name failslab, interval 1, probability 0, space 0, times 0 [ 226.222935] CPU: 0 PID: 9629 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 226.230250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.239610] Call Trace: [ 226.239642] dump_stack+0x1c4/0x2b4 [ 226.239661] ? dump_stack_print_info.cold.2+0x52/0x52 23:44:41 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x1, 0xffffffffffffff7b}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5, r1}) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/2, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x40405515, &(0x7f0000001000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000080)=r4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2e0401, 0x0) 23:44:41 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 226.239683] should_fail.cold.4+0xa/0x17 [ 226.239708] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 226.260260] ? save_stack+0xa9/0xd0 [ 226.263899] ? kasan_kmalloc+0xc7/0xe0 [ 226.267797] ? kasan_slab_alloc+0x12/0x20 [ 226.271958] ? kmem_cache_alloc+0x12e/0x730 [ 226.276295] ? mmu_topup_memory_caches+0xf7/0x390 [ 226.281140] ? kvm_mmu_load+0x21/0xfa0 [ 226.281156] ? vcpu_enter_guest+0x3dbe/0x6380 [ 226.281168] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 226.281192] ? do_vfs_ioctl+0x1de/0x1720 [ 226.294557] ? ksys_ioctl+0xa9/0xd0 [ 226.294571] ? __x64_sys_ioctl+0x73/0xb0 [ 226.294590] ? do_syscall_64+0x1b9/0x820 [ 226.310357] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.315740] ? percpu_ref_put_many+0x11c/0x260 [ 226.315756] ? lock_downgrade+0x900/0x900 [ 226.315771] ? lock_release+0x970/0x970 [ 226.315789] ? fs_reclaim_acquire+0x20/0x20 [ 226.332789] ? lock_downgrade+0x900/0x900 [ 226.336971] ? ___might_sleep+0x1ed/0x300 [ 226.341140] ? arch_local_save_flags+0x40/0x40 [ 226.345736] ? percpu_ref_put_many+0x13e/0x260 23:44:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x7, 0x0, 0x7fff, 0xd181, 'syz0\x00', 0xd09}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:41 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xa000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 226.350331] ? trace_hardirqs_on+0xbd/0x310 [ 226.354665] __should_failslab+0x124/0x180 [ 226.354681] should_failslab+0x9/0x14 [ 226.354695] kmem_cache_alloc+0x2be/0x730 [ 226.354717] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.366870] ? mmu_topup_memory_caches+0xf7/0x390 [ 226.366889] mmu_topup_memory_caches+0xf7/0x390 [ 226.381908] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.387447] kvm_mmu_load+0x21/0xfa0 [ 226.391282] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 226.396225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.396241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.396261] vcpu_enter_guest+0x3dbe/0x6380 [ 226.411642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.417301] ? check_preemption_disabled+0x48/0x200 [ 226.422340] ? emulator_read_emulated+0x50/0x50 [ 226.422361] ? perf_trace_lock+0x7a0/0x7a0 [ 226.431261] ? debug_smp_processor_id+0x1c/0x20 [ 226.435946] ? perf_trace_lock_acquire+0x15b/0x800 [ 226.441064] ? vmx_write_tsc_offset+0x680/0x680 [ 226.441083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:44:41 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x880, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x10001, 0x1, 0x20, 0x4, 0x0, 0xa23a, 0x500, 0x1, 0x9, 0x1, 0x3, 0x3, 0xfffffffffffffc01, 0x7, 0x10000, 0x9170, 0x15, 0x7, 0x7fffffff, 0x9, 0x9, 0x4ac, 0x0, 0x4, 0x1, 0x9, 0x8, 0x1000, 0x78f, 0xc8, 0x9, 0x1000, 0x1, 0x5ed, 0x2, 0x2, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x20420, 0x5, 0x10000, 0x1, 0x81, 0xfffffffffffffffe, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200, 0x0) 23:44:41 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x7, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 226.451274] ? check_preemption_disabled+0x48/0x200 [ 226.456305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 226.461855] ? check_preemption_disabled+0x48/0x200 [ 226.466885] ? perf_trace_lock_acquire+0x15b/0x800 [ 226.471839] ? lock_acquire+0x1ed/0x520 [ 226.475830] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 226.480865] ? lock_release+0x970/0x970 [ 226.484857] ? kvm_gen_update_masterclock+0x350/0x350 [ 226.490073] ? kvm_arch_dev_ioctl+0x630/0x630 [ 226.494587] ? preempt_notifier_dec+0x20/0x20 [ 226.499109] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 226.503973] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 226.509026] kvm_vcpu_ioctl+0x72b/0x1150 [ 226.513113] ? kvm_vcpu_block+0x1030/0x1030 [ 226.517461] ? __fget+0x4aa/0x740 [ 226.520945] ? __f_unlock_pos+0x19/0x20 [ 226.524943] ? __fget+0x4d1/0x740 [ 226.528430] ? ksys_dup3+0x680/0x680 [ 226.532184] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 226.537129] ? fsnotify+0xaae/0x12f0 [ 226.540862] ? kvm_vcpu_block+0x1030/0x1030 [ 226.545206] do_vfs_ioctl+0x1de/0x1720 [ 226.549113] ? fsnotify_first_mark+0x350/0x350 [ 226.553714] ? __fsnotify_parent+0xcc/0x420 [ 226.558181] ? ioctl_preallocate+0x300/0x300 [ 226.562612] ? __fget_light+0x2e9/0x430 [ 226.566608] ? fget_raw+0x20/0x20 [ 226.570075] ? __sb_end_write+0xd9/0x110 [ 226.574155] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 226.579714] ? fput+0x130/0x1a0 [ 226.583023] ? ksys_write+0x1ae/0x260 [ 226.586845] ? security_file_ioctl+0x94/0xc0 [ 226.591272] ksys_ioctl+0xa9/0xd0 [ 226.594750] __x64_sys_ioctl+0x73/0xb0 [ 226.598671] do_syscall_64+0x1b9/0x820 [ 226.602614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 226.608000] ? syscall_return_slowpath+0x5e0/0x5e0 [ 226.612946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.617780] ? trace_hardirqs_on_caller+0x310/0x310 [ 226.622786] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 226.627792] ? prepare_exit_to_usermode+0x291/0x3b0 [ 226.632816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 226.637652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.642832] RIP: 0033:0x457579 [ 226.646076] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.664972] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.672690] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 226.679953] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 226.687251] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 226.694511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 226.701769] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:42 executing program 0: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xaab) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:42 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xffffffff00000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}]}, 0x10) 23:44:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 23:44:42 executing program 4 (fault-call:7 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5451) 23:44:42 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) 23:44:42 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {}]}, 0x10) [ 227.126092] FAULT_INJECTION: forcing a failure. [ 227.126092] name failslab, interval 1, probability 0, space 0, times 0 [ 227.191727] CPU: 1 PID: 9688 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 227.199055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.208421] Call Trace: [ 227.211030] dump_stack+0x1c4/0x2b4 [ 227.214683] ? dump_stack_print_info.cold.2+0x52/0x52 [ 227.219904] should_fail.cold.4+0xa/0x17 [ 227.223989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 227.229106] ? save_stack+0xa9/0xd0 [ 227.232756] ? kasan_kmalloc+0xc7/0xe0 [ 227.236651] ? kasan_slab_alloc+0x12/0x20 23:44:42 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x1}) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1, 0x113}}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x40405515, &(0x7f0000001000)) 23:44:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6}]}, 0x10) [ 227.236665] ? kmem_cache_alloc+0x12e/0x730 [ 227.236684] ? mmu_topup_memory_caches+0xf7/0x390 [ 227.245129] ? kvm_mmu_load+0x21/0xfa0 [ 227.245146] ? vcpu_enter_guest+0x3dbe/0x6380 [ 227.245163] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 227.263376] ? do_vfs_ioctl+0x1de/0x1720 [ 227.267459] ? ksys_ioctl+0xa9/0xd0 [ 227.271100] ? __x64_sys_ioctl+0x73/0xb0 [ 227.275173] ? do_syscall_64+0x1b9/0x820 [ 227.279237] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.279257] ? percpu_ref_put_many+0x11c/0x260 [ 227.279273] ? lock_downgrade+0x900/0x900 [ 227.279288] ? lock_release+0x970/0x970 [ 227.279306] ? fs_reclaim_acquire+0x20/0x20 [ 227.289222] ? lock_downgrade+0x900/0x900 [ 227.289240] ? ___might_sleep+0x1ed/0x300 [ 227.289258] ? arch_local_save_flags+0x40/0x40 [ 227.297341] ? percpu_ref_put_many+0x13e/0x260 [ 227.297357] ? trace_hardirqs_on+0xbd/0x310 [ 227.297379] __should_failslab+0x124/0x180 [ 227.297394] should_failslab+0x9/0x14 [ 227.305917] kmem_cache_alloc+0x2be/0x730 [ 227.305939] ? mmu_topup_memory_caches+0xf7/0x390 [ 227.305958] mmu_topup_memory_caches+0xf7/0x390 [ 227.314658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 227.314676] kvm_mmu_load+0x21/0xfa0 [ 227.314689] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 227.314706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.323570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.323588] vcpu_enter_guest+0x3dbe/0x6380 [ 227.323605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.345240] ? check_preemption_disabled+0x48/0x200 [ 227.345261] ? emulator_read_emulated+0x50/0x50 [ 227.345281] ? perf_trace_lock+0x7a0/0x7a0 [ 227.354600] ? debug_smp_processor_id+0x1c/0x20 [ 227.354616] ? perf_trace_lock_acquire+0x15b/0x800 [ 227.354638] ? vmx_write_tsc_offset+0x680/0x680 [ 227.408500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.414033] ? check_preemption_disabled+0x48/0x200 [ 227.419054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 227.424583] ? check_preemption_disabled+0x48/0x200 [ 227.429591] ? perf_trace_lock_acquire+0x15b/0x800 [ 227.434513] ? lock_acquire+0x1ed/0x520 [ 227.438472] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 227.443478] ? lock_release+0x970/0x970 [ 227.447444] ? kvm_gen_update_masterclock+0x350/0x350 [ 227.452631] ? kvm_arch_dev_ioctl+0x630/0x630 [ 227.457115] ? preempt_notifier_dec+0x20/0x20 [ 227.461623] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 227.466554] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 227.471565] kvm_vcpu_ioctl+0x72b/0x1150 [ 227.475622] ? kvm_vcpu_block+0x1030/0x1030 [ 227.479953] ? __fget+0x4aa/0x740 [ 227.483413] ? __f_unlock_pos+0x19/0x20 [ 227.487378] ? __fget+0x4d1/0x740 [ 227.490821] ? ksys_dup3+0x680/0x680 [ 227.494535] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 227.499454] ? fsnotify+0xaae/0x12f0 [ 227.503162] ? kvm_vcpu_block+0x1030/0x1030 [ 227.507472] do_vfs_ioctl+0x1de/0x1720 [ 227.511350] ? fsnotify_first_mark+0x350/0x350 [ 227.515919] ? __fsnotify_parent+0xcc/0x420 [ 227.520234] ? ioctl_preallocate+0x300/0x300 [ 227.524635] ? __fget_light+0x2e9/0x430 [ 227.528595] ? fget_raw+0x20/0x20 [ 227.532040] ? __sb_end_write+0xd9/0x110 [ 227.536092] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 227.541618] ? fput+0x130/0x1a0 [ 227.544891] ? ksys_write+0x1ae/0x260 [ 227.548683] ? security_file_ioctl+0x94/0xc0 [ 227.553099] ksys_ioctl+0xa9/0xd0 [ 227.556563] __x64_sys_ioctl+0x73/0xb0 [ 227.560439] do_syscall_64+0x1b9/0x820 [ 227.564329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 227.569681] ? syscall_return_slowpath+0x5e0/0x5e0 [ 227.574598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.579432] ? trace_hardirqs_on_caller+0x310/0x310 [ 227.584435] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 227.589452] ? prepare_exit_to_usermode+0x291/0x3b0 [ 227.594461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 227.599302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.604479] RIP: 0033:0x457579 [ 227.607661] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.626552] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.634250] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 227.641508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 227.648766] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 227.656030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 227.663287] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 23:44:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x11000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x120, 0xc87, 0x9, 0x7fff, 0x100000001}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x600b01, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r2, 0xc5, "ace07443a3a52be18c79044210fc1394587940760e29d19a8493422d760ff98f90192e54700a128253af2b9354affd53d596e49d5786efe556f55a014cb36b5ee9ba21f4cf098b1a16ace012db9f3c9151769cef7bedeb977ab1b785dd5121b6a6d5a3727e71ccdbd9433bab128da66f14f4b09c4c8e11838b19bd21a6435e5d6779c12a87a6bd53e66043f6610189ef99a3861da5fcc773d08a016790f3b34c75cf1c94758754aabf976103bcb3e159419135aac4c690e883d545623e0c356e0edae32cdc"}, &(0x7f0000000200)=0xcd) write$P9_RLOCK(r1, &(0x7f0000000240)={0x8, 0x35, 0x1}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) 23:44:43 executing program 4 (fault-call:7 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6}]}, 0x10) 23:44:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x140) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x12, "f5f484369caab9ecaaebde70d9f7378ef75e97d8d852545e807c754f2e"}, &(0x7f00000000c0)=0x41) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000180)="fff14a755d06c8d38e31aced34f8b68c9ba806fc18ecc9d930686e8dff40b4b0a22fca4b295da41a8257e9a9c6e4b3427e378f98ee25fd2546f954b81afdd8f6ae55c267c2812b463bfb6099219a8a9809b3f5c4ec72f86a02e5ee63dbabaa2b984325e4f4cc7fb02a73e484ca08d356edff2f3882254fe271d7819bbac4acc652181ac2865f115686a1c49759a12b36") ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x13, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5421) 23:44:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6}]}, 0x10) [ 228.056215] FAULT_INJECTION: forcing a failure. [ 228.056215] name failslab, interval 1, probability 0, space 0, times 0 [ 228.098786] CPU: 0 PID: 9727 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 228.106115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.115479] Call Trace: [ 228.118104] dump_stack+0x1c4/0x2b4 [ 228.121751] ? dump_stack_print_info.cold.2+0x52/0x52 [ 228.126965] should_fail.cold.4+0xa/0x17 [ 228.131061] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.136189] ? save_stack+0xa9/0xd0 [ 228.136204] ? kasan_kmalloc+0xc7/0xe0 [ 228.136221] ? kasan_slab_alloc+0x12/0x20 [ 228.147850] ? kmem_cache_alloc+0x12e/0x730 [ 228.147865] ? mmu_topup_memory_caches+0xf7/0x390 [ 228.147881] ? kvm_mmu_load+0x21/0xfa0 [ 228.160989] ? vcpu_enter_guest+0x3dbe/0x6380 [ 228.165492] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 228.170522] ? do_vfs_ioctl+0x1de/0x1720 [ 228.174596] ? ksys_ioctl+0xa9/0xd0 [ 228.178239] ? __x64_sys_ioctl+0x73/0xb0 [ 228.182486] ? do_syscall_64+0x1b9/0x820 [ 228.186567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.192047] ? percpu_ref_put_many+0x11c/0x260 [ 228.196651] ? lock_downgrade+0x900/0x900 [ 228.200817] ? lock_release+0x970/0x970 [ 228.204808] ? fs_reclaim_acquire+0x20/0x20 [ 228.209142] ? lock_downgrade+0x900/0x900 [ 228.213311] ? ___might_sleep+0x1ed/0x300 [ 228.217470] ? arch_local_save_flags+0x40/0x40 [ 228.222058] ? percpu_ref_put_many+0x13e/0x260 [ 228.226669] ? trace_hardirqs_on+0xbd/0x310 [ 228.231018] __should_failslab+0x124/0x180 [ 228.235283] should_failslab+0x9/0x14 [ 228.239084] kmem_cache_alloc+0x2be/0x730 [ 228.243227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 228.248752] ? kvm_pfn_to_page+0x7a/0xa0 [ 228.252812] ? mmu_topup_memory_caches+0xf7/0x390 [ 228.257659] mmu_topup_memory_caches+0xf7/0x390 [ 228.262318] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 228.267854] kvm_mmu_load+0x21/0xfa0 [ 228.271556] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 228.276472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.282000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.287529] vcpu_enter_guest+0x3dbe/0x6380 [ 228.291838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.297365] ? check_preemption_disabled+0x48/0x200 [ 228.302375] ? emulator_read_emulated+0x50/0x50 [ 228.307051] ? perf_trace_lock+0x7a0/0x7a0 [ 228.311282] ? debug_smp_processor_id+0x1c/0x20 [ 228.315944] ? perf_trace_lock_acquire+0x15b/0x800 [ 228.320862] ? vmx_write_tsc_offset+0x680/0x680 [ 228.325520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.331050] ? check_preemption_disabled+0x48/0x200 [ 228.336060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 228.341594] ? check_preemption_disabled+0x48/0x200 [ 228.346598] ? perf_trace_lock_acquire+0x15b/0x800 [ 228.351518] ? lock_acquire+0x1ed/0x520 [ 228.355479] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 228.360488] ? lock_release+0x970/0x970 [ 228.364449] ? kvm_gen_update_masterclock+0x350/0x350 [ 228.369626] ? kvm_arch_dev_ioctl+0x630/0x630 [ 228.374110] ? preempt_notifier_dec+0x20/0x20 [ 228.378597] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 228.383436] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 228.388445] kvm_vcpu_ioctl+0x72b/0x1150 [ 228.392497] ? kvm_vcpu_block+0x1030/0x1030 [ 228.396815] ? __fget+0x4aa/0x740 [ 228.400269] ? __f_unlock_pos+0x19/0x20 [ 228.404233] ? __fget+0x4d1/0x740 [ 228.407790] ? ksys_dup3+0x680/0x680 [ 228.411498] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 228.416412] ? fsnotify+0xaae/0x12f0 [ 228.420115] ? kvm_vcpu_block+0x1030/0x1030 [ 228.424435] do_vfs_ioctl+0x1de/0x1720 [ 228.428314] ? fsnotify_first_mark+0x350/0x350 [ 228.432883] ? __fsnotify_parent+0xcc/0x420 [ 228.437210] ? ioctl_preallocate+0x300/0x300 [ 228.441606] ? __fget_light+0x2e9/0x430 [ 228.445568] ? fget_raw+0x20/0x20 [ 228.449011] ? __sb_end_write+0xd9/0x110 [ 228.453066] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 228.458703] ? fput+0x130/0x1a0 [ 228.461976] ? ksys_write+0x1ae/0x260 [ 228.465765] ? security_file_ioctl+0x94/0xc0 [ 228.470164] ksys_ioctl+0xa9/0xd0 [ 228.473606] __x64_sys_ioctl+0x73/0xb0 [ 228.477483] do_syscall_64+0x1b9/0x820 [ 228.481355] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 228.486727] ? syscall_return_slowpath+0x5e0/0x5e0 [ 228.491646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.496479] ? trace_hardirqs_on_caller+0x310/0x310 [ 228.501492] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 228.506497] ? prepare_exit_to_usermode+0x291/0x3b0 [ 228.511504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.516343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.521521] RIP: 0033:0x457579 [ 228.524705] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:44:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x80ffff00000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = socket$inet6(0xa, 0x0, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'bcsh0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200040, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe12f, 0x4000) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x0, 0x0, 0x1000, 0x8, 0x8000, 0x200}}, 0x50) [ 228.543603] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.551302] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 228.558667] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 228.565927] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 228.573187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 228.580444] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x2000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:44:44 executing program 4 (fault-call:7 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x0, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x0) openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r3 = getpgid(0x0) r4 = getpgrp(0xffffffffffffffff) kcmp(r3, r4, 0x5, r2, r1) [ 228.938689] FAULT_INJECTION: forcing a failure. [ 228.938689] name failslab, interval 1, probability 0, space 0, times 0 [ 228.958963] CPU: 1 PID: 9777 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 228.966280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.966285] Call Trace: [ 228.966310] dump_stack+0x1c4/0x2b4 [ 228.966334] ? dump_stack_print_info.cold.2+0x52/0x52 23:44:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1800, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 228.981897] ? __kernel_text_address+0xd/0x40 [ 228.981916] ? unwind_get_return_address+0x61/0xa0 [ 228.991575] should_fail.cold.4+0xa/0x17 [ 228.991590] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 228.991602] ? save_stack+0xa9/0xd0 [ 228.991614] ? kasan_kmalloc+0xc7/0xe0 [ 228.991624] ? kasan_slab_alloc+0x12/0x20 [ 228.991642] ? kmem_cache_alloc+0x12e/0x730 [ 229.017321] ? mmu_topup_memory_caches+0xf7/0x390 [ 229.017332] ? kvm_mmu_load+0x21/0xfa0 [ 229.017350] ? vcpu_enter_guest+0x3dbe/0x6380 23:44:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) [ 229.034861] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 229.034885] ? do_vfs_ioctl+0x1de/0x1720 [ 229.034903] ? ksys_ioctl+0xa9/0xd0 [ 229.043955] ? __x64_sys_ioctl+0x73/0xb0 [ 229.043968] ? do_syscall_64+0x1b9/0x820 [ 229.043987] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.061088] ? percpu_ref_put_many+0x11c/0x260 [ 229.065677] ? lock_downgrade+0x900/0x900 [ 229.065691] ? lock_release+0x970/0x970 [ 229.065712] ? fs_reclaim_acquire+0x20/0x20 [ 229.078946] ? lock_downgrade+0x900/0x900 [ 229.083102] ? ___might_sleep+0x1ed/0x300 [ 229.083117] ? arch_local_save_flags+0x40/0x40 [ 229.083134] ? percpu_ref_put_many+0x13e/0x260 [ 229.091845] ? trace_hardirqs_on+0xbd/0x310 [ 229.091874] __should_failslab+0x124/0x180 [ 229.091890] should_failslab+0x9/0x14 [ 229.100769] kmem_cache_alloc+0x2be/0x730 [ 229.100784] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.100796] ? kvm_pfn_to_page+0x7a/0xa0 [ 229.100813] ? mmu_topup_memory_caches+0xf7/0x390 [ 229.100826] mmu_topup_memory_caches+0xf7/0x390 [ 229.100836] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.100848] kvm_mmu_load+0x21/0xfa0 [ 229.100871] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 229.100887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.152876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.158411] vcpu_enter_guest+0x3dbe/0x6380 [ 229.162732] ? emulator_read_emulated+0x50/0x50 [ 229.167401] ? vmx_vcpu_load+0xb06/0x1030 [ 229.171548] ? mark_held_locks+0x130/0x130 [ 229.175774] ? vmx_write_tsc_offset+0x680/0x680 [ 229.180429] ? lock_downgrade+0x900/0x900 [ 229.184564] ? kasan_check_read+0x11/0x20 [ 229.188722] ? lock_acquire+0x1ed/0x520 [ 229.192682] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 229.197689] ? preempt_count_add+0x7d/0x160 [ 229.202005] ? lock_release+0x970/0x970 [ 229.205972] ? kvm_gen_update_masterclock+0x350/0x350 [ 229.211153] ? kvm_arch_dev_ioctl+0x630/0x630 [ 229.215636] ? preempt_notifier_dec+0x20/0x20 [ 229.220123] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 229.224955] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 229.229966] kvm_vcpu_ioctl+0x72b/0x1150 [ 229.234027] ? kvm_vcpu_block+0x1030/0x1030 [ 229.238342] ? __fget+0x4aa/0x740 [ 229.241793] ? __f_unlock_pos+0x19/0x20 [ 229.245759] ? __fget+0x4d1/0x740 [ 229.249207] ? ksys_dup3+0x680/0x680 [ 229.252914] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 229.257844] ? fsnotify+0xaae/0x12f0 [ 229.261562] ? kvm_vcpu_block+0x1030/0x1030 [ 229.265879] do_vfs_ioctl+0x1de/0x1720 [ 229.269755] ? fsnotify_first_mark+0x350/0x350 [ 229.274327] ? __fsnotify_parent+0xcc/0x420 [ 229.278639] ? ioctl_preallocate+0x300/0x300 [ 229.283051] ? __fget_light+0x2e9/0x430 [ 229.287014] ? fget_raw+0x20/0x20 [ 229.290467] ? __sb_end_write+0xd9/0x110 [ 229.294525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.300049] ? fput+0x130/0x1a0 [ 229.303317] ? ksys_write+0x1ae/0x260 [ 229.307108] ? security_file_ioctl+0x94/0xc0 [ 229.311528] ksys_ioctl+0xa9/0xd0 [ 229.314969] __x64_sys_ioctl+0x73/0xb0 [ 229.318844] do_syscall_64+0x1b9/0x820 [ 229.322727] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 229.328078] ? syscall_return_slowpath+0x5e0/0x5e0 [ 229.332997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.337829] ? trace_hardirqs_on_caller+0x310/0x310 [ 229.342863] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 229.347878] ? prepare_exit_to_usermode+0x291/0x3b0 [ 229.352887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 229.357721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.362896] RIP: 0033:0x457579 [ 229.366081] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:44:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc0045878) [ 229.384969] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.392665] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 229.400007] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 229.407265] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 229.414525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 229.421779] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x7400000000000000, 0x5, 0xffff}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:44 executing program 4 (fault-call:7 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:44:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xd, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc63490639fbf46b18833bff0f0000", @ANYRES16=r1, @ANYBLOB="02002dbd7000fbdbdf2501000000080005008000000008000600060000000800040000000000240001000800080000000000080009003e0000000800050001000000080005000400000004000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000380)="e5bbf2788ff3d4bd654ed00221dbcb472c914c7b7dd18f44e55a51129e7401029f3b7ce0eb5722638697b9127a0a744daf765ac88e1aac1f1d740a846203a309da42f921b08f3a03c2a0ed9970190e27827f09a4a216c5d2fd5da36554f34e6f39df8c38419888e64e7b7a9bb0", 0x6d) pipe2(&(0x7f0000000040), 0x800) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockname$unix(r0, &(0x7f00000005c0)=@abs, &(0x7f0000000180)=0x6e) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x90000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="430000006dac92edc0ab9b3a06b0d2f02044910a9ac393748fb4a6ada0a061f291be0fe8c8b2985f47fbe386108b92296bafdf11672c7a79fc9525b6982c4db273755d19ccaf62cbf5342e9a4e8c7fd3dbab6f29c16e3b28a021ecfe47c711133e65aa3a61b2035006f4554100f8ee7400f330e72e4a5f00ac3b6d599297acf18cd521ffe056fbd524a7577395cff253975a4c9c5fa4f925332e604389ca7eb111be875d6b1c75c8"], &(0x7f00000000c0)=0x4b) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x83f, 0x1, 0xd, 0x400, r4}, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2008040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x201, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x40405515, &(0x7f0000000340)) fallocate(r2, 0x21, 0x200, 0x4) 23:44:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x0, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x8, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x80000000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) read(r0, &(0x7f0000000240)=""/225, 0xe1) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='/dev/snd/controlC#\x00', &(0x7f0000000100)='/dev/snd/controlC#\x00', &(0x7f0000000140)="73797374656d2b3a7472757374656447504c5c73656c696e7578ed00"], &(0x7f0000000200)=[&(0x7f00000001c0)], 0x800) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x6, 0x2, 0x469, 0xfffffffffffffff8, 0x4}, 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000001c0)) 23:44:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x550b) [ 229.653238] FAULT_INJECTION: forcing a failure. [ 229.653238] name failslab, interval 1, probability 0, space 0, times 0 [ 229.709858] CPU: 1 PID: 9824 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 229.717181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.726541] Call Trace: [ 229.729134] dump_stack+0x1c4/0x2b4 [ 229.732759] ? dump_stack_print_info.cold.2+0x52/0x52 [ 229.737946] should_fail.cold.4+0xa/0x17 [ 229.742000] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 229.747092] ? save_stack+0xa9/0xd0 [ 229.750706] ? kasan_kmalloc+0xc7/0xe0 [ 229.754578] ? kasan_slab_alloc+0x12/0x20 [ 229.758720] ? kmem_cache_alloc+0x12e/0x730 [ 229.763031] ? mmu_topup_memory_caches+0xf7/0x390 [ 229.767859] ? kvm_mmu_load+0x21/0xfa0 [ 229.771736] ? vcpu_enter_guest+0x3dbe/0x6380 [ 229.776219] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 229.781227] ? do_vfs_ioctl+0x1de/0x1720 [ 229.785288] ? ksys_ioctl+0xa9/0xd0 [ 229.788912] ? __x64_sys_ioctl+0x73/0xb0 [ 229.792962] ? do_syscall_64+0x1b9/0x820 [ 229.797015] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 229.802383] ? percpu_ref_put_many+0x11c/0x260 [ 229.806954] ? lock_downgrade+0x900/0x900 [ 229.811100] ? lock_release+0x970/0x970 [ 229.815062] ? fs_reclaim_acquire+0x20/0x20 [ 229.819374] ? lock_downgrade+0x900/0x900 [ 229.823514] ? ___might_sleep+0x1ed/0x300 [ 229.827650] ? arch_local_save_flags+0x40/0x40 [ 229.832219] ? percpu_ref_put_many+0x13e/0x260 [ 229.836790] ? trace_hardirqs_on+0xbd/0x310 [ 229.841118] __should_failslab+0x124/0x180 [ 229.845353] should_failslab+0x9/0x14 [ 229.849156] kmem_cache_alloc+0x2be/0x730 [ 229.853307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.858846] ? kvm_pfn_to_page+0x7a/0xa0 [ 229.862894] ? mmu_topup_memory_caches+0xf7/0x390 [ 229.867728] mmu_topup_memory_caches+0xf7/0x390 [ 229.872383] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 229.877910] kvm_mmu_load+0x21/0xfa0 [ 229.881622] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 229.886543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.892082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.897609] vcpu_enter_guest+0x3dbe/0x6380 [ 229.901921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.907451] ? check_preemption_disabled+0x48/0x200 [ 229.912972] ? emulator_read_emulated+0x50/0x50 [ 229.917632] ? __switch_to_asm+0x34/0x70 [ 229.921679] ? __switch_to_asm+0x34/0x70 [ 229.925735] ? __switch_to_asm+0x40/0x70 [ 229.929788] ? perf_trace_lock+0x7a0/0x7a0 [ 229.934015] ? debug_smp_processor_id+0x1c/0x20 [ 229.938687] ? __sched_text_start+0x8/0x8 [ 229.942832] ? check_preemption_disabled+0x48/0x200 [ 229.947844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 229.953368] ? retint_kernel+0x2d/0x2d [ 229.957256] ? trace_hardirqs_on_caller+0xc0/0x310 [ 229.962172] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 229.966913] ? trace_hardirqs_off+0x310/0x310 [ 229.971398] ? perf_trace_lock_acquire+0x15b/0x800 [ 229.976322] ? lock_acquire+0x1ed/0x520 [ 229.980300] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 229.985304] ? lock_release+0x970/0x970 [ 229.989268] ? kvm_gen_update_masterclock+0x350/0x350 [ 229.994453] ? preempt_schedule_common+0x1f/0xd0 [ 229.999208] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 230.004040] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 230.009052] kvm_vcpu_ioctl+0x72b/0x1150 [ 230.013114] ? kvm_vcpu_block+0x1030/0x1030 [ 230.017432] ? __fget+0x4aa/0x740 [ 230.020878] ? __f_unlock_pos+0x19/0x20 [ 230.024843] ? __fget+0x4d1/0x740 [ 230.028284] ? ksys_dup3+0x680/0x680 [ 230.031991] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 230.036908] ? fsnotify+0xaae/0x12f0 [ 230.040614] ? kvm_vcpu_block+0x1030/0x1030 [ 230.044930] do_vfs_ioctl+0x1de/0x1720 [ 230.048824] ? fsnotify_first_mark+0x350/0x350 [ 230.053397] ? __fsnotify_parent+0xcc/0x420 [ 230.057715] ? ioctl_preallocate+0x300/0x300 [ 230.062115] ? __fget_light+0x2e9/0x430 [ 230.066606] ? fget_raw+0x20/0x20 [ 230.070052] ? __sb_end_write+0xd9/0x110 [ 230.074114] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.080091] ? fput+0x130/0x1a0 [ 230.083359] ? ksys_write+0x1ae/0x260 [ 230.087158] ? security_file_ioctl+0x94/0xc0 [ 230.091561] ksys_ioctl+0xa9/0xd0 [ 230.095013] __x64_sys_ioctl+0x73/0xb0 [ 230.098898] do_syscall_64+0x1b9/0x820 [ 230.102786] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 230.108152] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.113083] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.117919] ? trace_hardirqs_on_caller+0x310/0x310 [ 230.122926] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 230.127931] ? prepare_exit_to_usermode+0x291/0x3b0 [ 230.132942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.137776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.142955] RIP: 0033:0x457579 23:44:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x550f) 23:44:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x0, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 230.146139] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.165026] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.172720] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 230.179987] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 230.187245] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 230.194502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 230.201770] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) 23:44:45 executing program 4 (fault-call:7 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:45 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x6, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) flistxattr(r0, &(0x7f0000000000)=""/76, 0x4c) perf_event_open(&(0x7f0000001000)={0x0, 0x393, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 23:44:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) 23:44:45 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)="5e70726f63656d31637075736574776c616e317b2e8e25f500") ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x40045564) 23:44:45 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) 23:44:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) 23:44:45 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:45 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000003c0)={0x7a0, 0x5, 0x100}) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000740)=0x80000000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x40405515, &(0x7f0000000540)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121000, 0x0) r4 = geteuid() fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x1}, 0x28, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000400)={0x1, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @loopback}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r3, &(0x7f0000000100)={0x78, 0x0, 0x4, {0xb53, 0x4, 0x0, {0x6, 0x7, 0x5, 0x0, 0x8, 0x101, 0x6, 0x2, 0x8, 0xe93f, 0x3de, r4, r5, 0x8, 0x7}}}, 0x78) bind$rds(r3, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000580)=0x2000, 0x4) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1d, &(0x7f0000000240)="16c47e878c4481ad7993d62f040800193e5e72d7c05139546145e6bbf40b5e2fa3e4a3bf47dc519a6e47c3d4f398b027abc731a2e95c62accc2e9f6710dc2ae220130b02c22542b1efb291d7827e3ee96e0b2a95a9589bcc6402efc46133bb0cb4af2614020465a1ad9e4f2c62443f154cd3e50bbc3fc22239604e52707b3746aa449bbe51858d7806968d0b4cc671f71457f43b8feae6951db5ad2703275a5ac28bde81fe5774f21d8f3e1c5f24f2aa93f1dc329454c445217e49df12a19f9a38d275c95d", 0xc5) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000200)=0x7) ioctl$KVM_SMI(r2, 0xaeb7) [ 230.503983] FAULT_INJECTION: forcing a failure. [ 230.503983] name failslab, interval 1, probability 0, space 0, times 0 [ 230.528038] QAT: Invalid ioctl [ 230.543555] QAT: Invalid ioctl [ 230.554767] QAT: Invalid ioctl [ 230.559775] CPU: 1 PID: 9874 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 230.566957] QAT: Invalid ioctl [ 230.567089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.579624] Call Trace: [ 230.582227] dump_stack+0x1c4/0x2b4 [ 230.585875] ? dump_stack_print_info.cold.2+0x52/0x52 [ 230.591084] ? __kernel_text_address+0xd/0x40 [ 230.595589] ? unwind_get_return_address+0x61/0xa0 [ 230.600533] should_fail.cold.4+0xa/0x17 [ 230.604612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 230.609729] ? save_stack+0xa9/0xd0 [ 230.613365] ? kasan_kmalloc+0xc7/0xe0 [ 230.617255] ? kasan_slab_alloc+0x12/0x20 [ 230.617269] ? kmem_cache_alloc+0x12e/0x730 [ 230.617287] ? mmu_topup_memory_caches+0xf7/0x390 [ 230.625729] ? kvm_mmu_load+0x21/0xfa0 [ 230.625749] ? vcpu_enter_guest+0x3dbe/0x6380 [ 230.638956] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 230.638977] ? do_vfs_ioctl+0x1de/0x1720 [ 230.648113] ? ksys_ioctl+0xa9/0xd0 [ 230.648124] ? __x64_sys_ioctl+0x73/0xb0 [ 230.648143] ? do_syscall_64+0x1b9/0x820 [ 230.655803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.655825] ? percpu_ref_put_many+0x11c/0x260 [ 230.665216] ? lock_downgrade+0x900/0x900 [ 230.665232] ? lock_release+0x970/0x970 [ 230.673939] ? fs_reclaim_acquire+0x20/0x20 [ 230.673954] ? lock_downgrade+0x900/0x900 [ 230.673972] ? ___might_sleep+0x1ed/0x300 [ 230.682246] ? arch_local_save_flags+0x40/0x40 [ 230.682258] ? percpu_ref_put_many+0x13e/0x260 [ 230.682271] ? trace_hardirqs_on+0xbd/0x310 [ 230.682289] __should_failslab+0x124/0x180 [ 230.682300] should_failslab+0x9/0x14 [ 230.682318] kmem_cache_alloc+0x2be/0x730 [ 230.690586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.690602] ? kvm_pfn_to_page+0x7a/0xa0 [ 230.699761] ? mmu_topup_memory_caches+0xf7/0x390 [ 230.699783] mmu_topup_memory_caches+0xf7/0x390 [ 230.699796] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.699809] kvm_mmu_load+0x21/0xfa0 [ 230.699821] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 230.699838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.755163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 230.760721] vcpu_enter_guest+0x3dbe/0x6380 [ 230.765067] ? emulator_read_emulated+0x50/0x50 [ 230.769737] ? vmx_vcpu_load+0xb06/0x1030 [ 230.773872] ? mark_held_locks+0x130/0x130 [ 230.778094] ? vmx_write_tsc_offset+0x680/0x680 [ 230.782776] ? lock_downgrade+0x900/0x900 [ 230.786919] ? kasan_check_read+0x11/0x20 [ 230.791056] ? lock_acquire+0x1ed/0x520 [ 230.795013] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 230.800034] ? preempt_count_add+0x7d/0x160 [ 230.804354] ? lock_release+0x970/0x970 [ 230.808319] ? kvm_gen_update_masterclock+0x350/0x350 [ 230.813495] ? kvm_arch_dev_ioctl+0x630/0x630 [ 230.817976] ? preempt_notifier_dec+0x20/0x20 [ 230.822462] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 230.827305] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 230.832309] kvm_vcpu_ioctl+0x72b/0x1150 [ 230.836354] ? kvm_vcpu_block+0x1030/0x1030 [ 230.840663] ? __fget+0x4aa/0x740 [ 230.844112] ? __f_unlock_pos+0x19/0x20 [ 230.848073] ? __fget+0x4d1/0x740 [ 230.851514] ? ksys_dup3+0x680/0x680 [ 230.855214] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 230.860125] ? fsnotify+0xaae/0x12f0 [ 230.863837] ? kvm_vcpu_block+0x1030/0x1030 [ 230.868140] do_vfs_ioctl+0x1de/0x1720 [ 230.872016] ? fsnotify_first_mark+0x350/0x350 [ 230.876580] ? __fsnotify_parent+0xcc/0x420 [ 230.880885] ? ioctl_preallocate+0x300/0x300 [ 230.885276] ? __fget_light+0x2e9/0x430 [ 230.889231] ? fget_raw+0x20/0x20 [ 230.892683] ? __sb_end_write+0xd9/0x110 [ 230.896734] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 230.902256] ? fput+0x130/0x1a0 [ 230.905519] ? ksys_write+0x1ae/0x260 [ 230.909309] ? security_file_ioctl+0x94/0xc0 [ 230.913713] ksys_ioctl+0xa9/0xd0 [ 230.917166] __x64_sys_ioctl+0x73/0xb0 [ 230.921043] do_syscall_64+0x1b9/0x820 [ 230.924913] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 230.930260] ? syscall_return_slowpath+0x5e0/0x5e0 [ 230.935170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.940016] ? trace_hardirqs_on_caller+0x310/0x310 [ 230.945015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 230.950018] ? prepare_exit_to_usermode+0x291/0x3b0 [ 230.955018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 230.959853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 230.965026] RIP: 0033:0x457579 [ 230.968204] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 230.987089] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.994817] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 23:44:46 executing program 4 (fault-call:7 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:46 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) 23:44:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6ef2, 0x800) write$input_event(r1, &(0x7f0000000140)={{0x0, 0x2710}, 0x1, 0x2, 0x9}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xd, 0x3, 0x2, "ad1ea3503d490ba182a19e0168"}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$TIOCCONS(r1, 0x541d) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1d) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 23:44:46 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x2600000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x8000) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) 23:44:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x36d}}, 0x0) dup2(r0, r1) [ 231.002089] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 231.009341] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.016593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 [ 231.023841] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:46 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x4000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) [ 231.097271] input: syz1 as /devices/virtual/input/input126 23:44:46 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) 23:44:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x202) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/219) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 231.146373] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.152831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.159517] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.165872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.187410] FAULT_INJECTION: forcing a failure. [ 231.187410] name failslab, interval 1, probability 0, space 0, times 0 [ 231.201682] input: syz1 as /devices/virtual/input/input127 [ 231.222832] CPU: 0 PID: 9910 Comm: syz-executor4 Not tainted 4.19.0-rc6+ #271 [ 231.230215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.230221] Call Trace: [ 231.230248] dump_stack+0x1c4/0x2b4 [ 231.230266] ? dump_stack_print_info.cold.2+0x52/0x52 [ 231.230280] ? __kernel_text_address+0xd/0x40 [ 231.230298] ? unwind_get_return_address+0x61/0xa0 [ 231.245847] should_fail.cold.4+0xa/0x17 [ 231.245866] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 231.245883] ? save_stack+0xa9/0xd0 [ 231.255561] ? kasan_kmalloc+0xc7/0xe0 [ 231.255574] ? kasan_slab_alloc+0x12/0x20 [ 231.255592] ? kmem_cache_alloc+0x12e/0x730 [ 231.264547] ? mmu_topup_memory_caches+0xf7/0x390 [ 231.264559] ? kvm_mmu_load+0x21/0xfa0 [ 231.264572] ? vcpu_enter_guest+0x3dbe/0x6380 [ 231.264587] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 231.271193] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.273394] ? do_vfs_ioctl+0x1de/0x1720 [ 231.273407] ? ksys_ioctl+0xa9/0xd0 [ 231.273422] ? __x64_sys_ioctl+0x73/0xb0 [ 231.277700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.281429] ? do_syscall_64+0x1b9/0x820 [ 231.281446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.281460] ? percpu_ref_put_many+0x11c/0x260 [ 231.281473] ? lock_downgrade+0x900/0x900 [ 231.281485] ? lock_release+0x970/0x970 [ 231.281502] ? fs_reclaim_acquire+0x20/0x20 [ 231.286145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.290628] ? lock_downgrade+0x900/0x900 [ 231.290647] ? ___might_sleep+0x1ed/0x300 [ 231.290662] ? arch_local_save_flags+0x40/0x40 [ 231.290673] ? percpu_ref_put_many+0x13e/0x260 [ 231.290689] ? trace_hardirqs_on+0xbd/0x310 [ 231.383072] __should_failslab+0x124/0x180 [ 231.387299] should_failslab+0x9/0x14 [ 231.391091] kmem_cache_alloc+0x2be/0x730 [ 231.395227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 231.400757] ? mmu_topup_memory_caches+0xf7/0x390 [ 231.405599] mmu_topup_memory_caches+0xf7/0x390 [ 231.410261] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 231.415784] kvm_mmu_load+0x21/0xfa0 [ 231.419520] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 231.424447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.429992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 231.435532] vcpu_enter_guest+0x3dbe/0x6380 [ 231.439853] ? emulator_read_emulated+0x50/0x50 [ 231.444517] ? vmx_vcpu_load+0xb06/0x1030 [ 231.448656] ? mark_held_locks+0x130/0x130 [ 231.452885] ? vmx_write_tsc_offset+0x680/0x680 [ 231.457540] ? lock_downgrade+0x900/0x900 [ 231.461671] ? kasan_check_read+0x11/0x20 [ 231.465811] ? lock_acquire+0x1ed/0x520 [ 231.469769] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 231.474767] ? preempt_count_add+0x7d/0x160 [ 231.479072] ? lock_release+0x970/0x970 [ 231.483033] ? kvm_gen_update_masterclock+0x350/0x350 [ 231.488217] ? kvm_arch_dev_ioctl+0x630/0x630 [ 231.492714] ? preempt_notifier_dec+0x20/0x20 [ 231.497207] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 231.502031] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 231.507040] kvm_vcpu_ioctl+0x72b/0x1150 [ 231.511088] ? kvm_vcpu_block+0x1030/0x1030 [ 231.515402] ? __fget+0x4aa/0x740 [ 231.518844] ? __f_unlock_pos+0x19/0x20 [ 231.522800] ? __fget+0x4d1/0x740 [ 231.526237] ? ksys_dup3+0x680/0x680 [ 231.529937] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 231.534851] ? fsnotify+0xaae/0x12f0 [ 231.538549] ? kvm_vcpu_block+0x1030/0x1030 [ 231.542858] do_vfs_ioctl+0x1de/0x1720 [ 231.546740] ? fsnotify_first_mark+0x350/0x350 [ 231.551304] ? __fsnotify_parent+0xcc/0x420 [ 231.555610] ? ioctl_preallocate+0x300/0x300 [ 231.560003] ? __fget_light+0x2e9/0x430 [ 231.563968] ? fget_raw+0x20/0x20 [ 231.567417] ? __sb_end_write+0xd9/0x110 [ 231.571478] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 231.576997] ? fput+0x130/0x1a0 [ 231.580260] ? ksys_write+0x1ae/0x260 [ 231.584050] ? security_file_ioctl+0x94/0xc0 [ 231.588442] ksys_ioctl+0xa9/0xd0 [ 231.591887] __x64_sys_ioctl+0x73/0xb0 [ 231.595767] do_syscall_64+0x1b9/0x820 [ 231.599647] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 231.605004] ? syscall_return_slowpath+0x5e0/0x5e0 [ 231.609925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.614766] ? trace_hardirqs_on_caller+0x310/0x310 [ 231.619769] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 231.624770] ? prepare_exit_to_usermode+0x291/0x3b0 [ 231.629771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 231.634600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.639772] RIP: 0033:0x457579 [ 231.642965] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 231.661849] RSP: 002b:00007f4b8f61cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.669551] RAX: ffffffffffffffda RBX: 00007f4b8f61cc90 RCX: 0000000000457579 [ 231.676818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 231.684072] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 231.691326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b8f61d6d4 23:44:46 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xa009, 0x400) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f00000000c0)=0x3) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x2, 0x5}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x40405515, &(0x7f0000001000)) [ 231.698577] R13: 00000000004c003b R14: 00000000004d0108 R15: 0000000000000006 23:44:46 executing program 4 (fault-call:7 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1b) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x836a) ftruncate(r0, 0x10001) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r1, 0x200) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0xfffffffffffffd42, 0x3) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 231.797650] input: syz1 as /devices/virtual/input/input128 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@remote, @remote, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@mcast2, r2}, 0x14) [ 231.855062] input: syz1 as /devices/virtual/input/input129 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prlimit64(r1, 0x5, &(0x7f0000000080)={0x4, 0xdb}, &(0x7f00000000c0)) 23:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 231.966767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.977302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.016706] input: syz1 as /devices/virtual/input/input130 23:44:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x36d}}, 0x0) dup2(r0, r1) 23:44:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='hugetlbfs\x00', 0x0, &(0x7f0000000140)='posix_acl_access\'\x00') tkill(0x0, 0x0) 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x5000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 232.057796] input: syz1 as /devices/virtual/input/input131 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xffffffe4, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f0000000180)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2000000000000001, 'ip6tnl0\x00', 0x9}, 0x18) r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x408000, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0xa00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="f4000000b8099e9d0012fc27ddb1088cdd6de9eb00720522a59a8901f10d48595f6625f348408caff671bb2a7d9edd446c272e23de41a7c20a1b2186dfe484a2211931a05ba49384c7a38b1c616ac8603faf9c25f27995c8b58cf08f41ea08f9753a232f7dbade2b436a372daaf51598d148f02e455e1d5f4bb013dd214b6618fb8ddfe7d4e16d16c3ffeb2a4a232d2e05ad685a002a205f4e4605bea679e3f8abe3dbd4aa898091b5788cd54454e9a6c92e000c82d9dd1c62f854f64d4be692fa1824eff714f810fe35c1081a001280a879bb6ee25c08f315068a05763d436190b70dfc549f763d9437cb3291439c0c381c7bdd00d250086752d202aef3585bb9cffccd4e653dc2c1458951a210c579c13ee9fa125ab0bc3df7670fc1b939b3c9107ca0458a21fb5b1aa73bf611c93c86e504346ea98893cb4ee93769dd688e2a0f72f4492aeea8e12fcfe5f515f2632103e7d8b47b199625eaa1c53275624d5a8cca7a439198ebba5696a4b3219d1f50c66bd257b8a8c4f450bb84e64c6142aea47941d88ee92881ef21bba008805a7b253e4c5d51b8edc5b7da61d84c6b0386dc89be165e3cdcad6e3535bce7888202b03d7854724c57cb3bb4dee5b3dce732787a9e2603a1cc05c759c0f1d304d62ace80681976828194b399cfebbdb3fdbf1c2fa36ccad51e7fe58f623e791f29623c1a1b28cbc58b6740d09604e3f04bf1a1e52473ca99c5849f4fe71165586cfce04a8d1a74c9d167be8bfc0dd220a50eed5b9b3c6b336923393f5816f83537abc324cbc8be6636c8c1d5f64edfa8ff36d4c94d1b1892f17554cb4731ee6abf0f193ba3847197bcbf743600fb5c973d"], &(0x7f00000003c0)=0xfc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r2, 0x4) recvmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000000440)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f0000000680)=""/223, 0xdf}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/58, 0x3a}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000000940)=""/217, 0xd9}], 0x9, 0x0, 0x0, 0x5}, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x3, @local, 0x4}}, 0x6, 0x20, 0x3105, 0x3, 0x100000000}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r3, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r3, 0xbc6}, 0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000001080)="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") perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff50]}, 0x45c) fdatasync(r0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3e4c8b42, 0x8000) sendto$inet(r1, &(0x7f00000007c0)="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", 0x1000, 0x40000, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x26, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 232.178339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:44:47 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) unshare(0x600) socket$inet(0x2, 0x2, 0x81) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x7ff, 0x80004) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x3f, 0x100000001, 0x3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)) r2 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x44) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 23:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x1f}, 0x8) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)=""/159, 0x9f) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x7, 0x10000) r2 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000007c0)=""/4096) [ 232.257538] kvm: pic: level sensitive irq not supported [ 232.257790] kvm: pic: level sensitive irq not supported [ 232.276963] kvm: pic: level sensitive irq not supported [ 232.309707] kvm: pic: level sensitive irq not supported [ 232.316699] kvm: pic: level sensitive irq not supported [ 232.332483] kvm: pic: level sensitive irq not supported [ 232.359061] input: syz1 as /devices/virtual/input/input134 [ 232.407268] input: syz1 as /devices/virtual/input/input135 23:44:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 23:44:47 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f0000000180)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2000000000000001, 'ip6tnl0\x00', 0x9}, 0x18) r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x408000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0xa00, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 23:44:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0x200}}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fbdbdf250b0000004c000300140002006272696467653000000000000000000008000300030000000800040000000000080008000300000014000600000000000000000000000000000000010800080008000000080006000100000008000400060000004c000100080005000400000008000100020000000c000700110000000c69180008000b0073697000080001000a00000008000500000000000c0006006e6f6e65000000000800010002000000"], 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001a00)={0x4, &(0x7f0000000280)=""/145, &(0x7f0000001980)=[{0x3, 0x1000, 0x7, &(0x7f00000007c0)=""/4096}, {0x1, 0x57, 0x3, &(0x7f00000017c0)=""/87}, {0x80000000, 0x94, 0x0, &(0x7f0000001840)=""/148}, {0x9, 0x58, 0x81, &(0x7f0000001900)=""/88}]}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) sendmsg$nl_route(r1, &(0x7f0000001b40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=@ipv4_getnetconf={0x24, 0x52, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x30e}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="2c0005caa240b78ec2fa815cd141006c9f00c9a4c160129cb6c2b7811054cc86d0cdeb538f1ef22f6611bacb7d32300276e6537c", @ANYRES16=r2, @ANYBLOB="100028bd7000fddbdf250a000000080004000500000008000600010400000800050001040000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r3 = memfd_create(&(0x7f00000000c0)='*e_1#+\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, "f5e11ac6e6dff88fd7bd4f8272d5c970dd1627e806abb0ff166ec5752ceefef093b046691664ef576772be934ce5bde171ae0b9536580e7e46b532b292550e1f1052e0584537e8fa4574fb851efc2dd8dda9207fab77d872a0fabcacdc020db9df887528b7f38173dd5c60039dcaaff90d4dd329fa1a990ab2c8c5b8d8242b7a54e15a1d6c20615a8feee60b21a00742aa92f054662d58f7def7418accf1614921139f29ccae2bb522a8f62f7543d44c66c9e98b00a965cf844a548180769488e8e3e72ea37e3021aef35d0766ddcc6e28dc866e74f53b47ae57f40b4feb16cb0a7469222a3ac4726d155f267bf3a7b667997f37d46b70a9dcc20d9247160ad66c17049ee16bed77e72cdc2bde89c378f2a7502d1b84910325faadb39e29c2926dd8eb03520573165ad8124c4cbcaf3d23e9244c505c46877818d7d63df8ded54b85aa1ce3827ed4997a26df47908ea689088a8e7d043fb923ed78a260e3e4c2a5b3c29f5299884512c4a1cb8c28e6f43d24eb3cfa1468639dd0c81a266fda0468e53ed30eeb3adab0d9b30ae79f3876b253595497e8e84986904a37a1b56cc4a0a133a6de7a44f85a4b671e309adcf82286149128c213c1a22f1cdd503ded9715099d668b33e8edba77c2add00743b443ad6b412156f5ce3029a19fc7216ba6cdf8b8e0b6ef07f3601175841aa21462d0a663f057ebe9fe4c3de6ab36c25bfb3d76a79d10379c13b58ca84bcea0d3a11a0e76aa1b90d1263245cbbbedbfda9ede2c9f7a0a5096b8da74875c2d57734e38e6d2f26a4410f52181aa8579837d7ea58d37db2a45699a61c4d2d52e465399cceeae023aecff89fe672c154fe3838387a4ce716d769416767370eb782954c1d9cd9bc94a03999eb4d73aceba8a1879a5838d02a0e96cd0d65c631500e3504cb3737b742b1c6a8090e28b4560f6bf49c992ac9e8b7fe32dbe82156833ce8e4a6ec020de1db7ede5f217f843203e53bc8197aecb85aa36f11e0233baa7ff36fbe4e8329880243e9ab57f309bd1fc8197969dcbd76182b085bc1735c23fcf631638be4c1f0e0fe7e5eba29b42757cec36756fd02f9f83a00ca6426c5bef0a0fc1c42602a7477506215e0a0e28c26329bc84013c19284cb17f1a8f4d3298b92e027b649b137046974410ce7fd64744237ec2a209fd2d2fb77d0a81a825792039e51824c40c479bee455d6f5619ec381dc0b0d18d906d2863e7b6db920b9f135c752bd8d1eaf5ff7aba1124260e153abbc29ac5d0edcfbd19f476c624878a69c73b62c9d0dd5ee670e5e8ae32a00edeb99bd15e905ff6aaf004fbb6c1d3d6ee9c485154202aa3cb39061a3724754c179134fd305f7277a6fcffa994e3846b063391e06cd3a9e0ed0dd4c1e61d592982049ee122bc4184baffee74698a183b0a7233ebeff262c04acc3715064ed678ac9303b76b652a995308413152c1cbdc52740ebc8a01f8f1b245423cc31fbd99dca224cb628c8ddb2f63c19921b7df3005186c69f0435e701d1ae2a9bb2f15530360fcfa33455203773af85586539a795ca6f424259261e8172d03baf12cdee7d51b775bbfc1d543e4afa4d205ba25bac0da37cf267ba8213e4e952d82967fca79b23aa1cb52db3a8cb8542f988054668888f4a96db83b32dfb23b75214c9e0a08e86cc89aa5fa23c880d2a9ba8360e76277858a8060cb4bf634ef6c27cc11b7597224ec20c58ea138e1b07a8b229c9fa1d96b0198faaa761145b0d7e4629e0f847fd8156e6e73934cbee43024fc1d3d7aceb8125c97e85dee3b8fd0ffaeeb0efa533cc6978e7de2a4788bb92a6f81a506f601c4d84a83e18738fa592996e1092f0ff5a66b5587a228a363456f7dc7bdd0d7860dfefa0db219c91940cabd89dbb19cae0a34c8a4e121a2d7fade7d6ee4b71998ba47525361ea5d259bf0c8c91665931c63f45431e58923d445274d1be8f696e09d5e67084a4a060daee02e7c88e37c5f390c40a3f4d2be68257ab52e39f97b2d9f3ddec322d2d0c923ae6ec8988a064b96b36be56bea5cbdbc1d46c5be44ed00918da6ec96110dde4100d47099052227571711cef3afdeebcbfe336b2413ce9efcbe0abb8e1bf2f2d4a09a38d75b637430d285c9688f05bc76fc6bec07d7bfe2a1e54ccd5a0331a79262c50afcf616a016a3bc8e934ef3364592d384d9aa43a491e6c231481bab93c2dea0bb99373bf332244bc129de87e28f3dae02e83cc1f06279143575b0fc654963c9a749c26eb8a8c93f7ec7b1083d82cae2f9934ee5879dfc9788efae58b7de49b5f61a78bbd1041f72eca6692c8e775cbca41c8a7450a665ed46e42acb609865e4e6f88a1b62422aeb4338ad0c9f2f66c05e81a050e64f7c6ab0c10fb56723548f093299f57661e48fe13a5cca264f7649e8243e7e2b70291553fc98ed17aee9fb2e9adabb49c05263ead045b6e0e4fc268e30733cf14ed3bf320c42440b6d617efde5d64e70694f9a44474770218b54f500c060500de2e80eb8a81acb7bddc29a75f5f043887c46e06f95dbd6db6116c3ad6c737ca021766e0885c73d5f5e11a38ade4cce30c45775636a2acb251ee57b405c72a23c8b2dcec1d26e8e5ec6f2dbbd866814d65ed1eda78133942d8946800622187a811540b29c6d0241d93d30b6f1f3e68bab1f2c7a792c673912e24dca5bfd11797fa94ea25473de6486b80e3dc6d42b801abbfbed8f6f878d11cf152ca2b6d01128603d379e5c01c74c6aecef9b101e4f5a1a17214bd164e6af46a1c273c04b31afbdb338f1cc9882651718405f4db85ae21fc55afadc206d333efb05e42431bb59a7285bad35d65365c01278af71acd276fd8e77b405cbab69852290b7f76004eead4812bc16181093d0fa1d8d8bc7abe6c04dce79a205d88898238859bae2f1d41623337681a3b917db35865db28f9bd3b7324562b763b2095e917dc89eacebcbeecf12037f5c1d9fc6b81d529bc0e7d30f11f63751d82b055b32dfe394454ab6bcab9e47abb3da278f4f517dfd38b99024d2ce45ea6139866b10b5909b378b1c92e15ec394d7fafbf0820964923804aca4f410cb32fac0f4c366102602961be293d03162406cecd77499bd75642589baf29fbbff4f653f49174ce683e9f5a5ed57b29f10fa2a1cc4f9fc98ddeb7b1d36cf30a0de5af827fac1d4bd5ceac10801480c0c3e24a881059823e1fd6f4093fd83936b935b417683cb8071fa50c29222f2683f38c3ba32cfbe152bc350ecd765d23d2a4d19e03e5f0a1ae242cc09f21b10d5a1cb12901c867194512334752bb127790d04bc38839d1301c4b7d0ef81eaa6776551a4fb6e206adc8f629fec1d541a88135a4aef7ea8f4bbb9deb2ebcdc9bc1dca9f521c5308c8f6a8d4d3d8cec7fd9c1b3422818e3c3d53fdbdf179d8da0793da540d28c098980f9b93dc6a6750730745c8ee5ffd18e06cc366d7357590da72b6e33ac15987e69f23968e176d7ab38177b396d599761df59fdf8edfa69ffaa53c2902903e7d79cd3dd96975a0c419d22bcc78333cfe12c45796ee65fbc684718414bdbf7edf08ff9a91876adcc3fc359c7cc6b2b9511bc4c598ce8168f33bbb31c895228de070bb1c81199f1cad3914b4119da96a79718089ec0f829c95190a2ef6e59b4656784a792ffa27ec12e16bd07dec7fc35a8176797654efced2da832743db109d44b08cb13563a3657e791d2b6a1d4f65f443fb9386c3a3dacb9c2d4529725b824fa2114844a55ed28e168a966ca42aa5ec2c504f62b6c4ade4ea31139cd8dc996a72c4b0b04d8d4d900d4cf591b7bf321e2a15d73a40c736561f860bc5250bfec3d1febe5e26be0984a1d0aa07bb65c6b4b9c682b8dcd9ce292552c9236670fc29c66e729c184770cb71c9ea278a3b17a98e2f5dd911f59133a67796c0a4722e2d811b28eacef3129fbb953db70e7eb4424519259d28a34c6f932e97dde8b3892dead83a2abd573b5b93f6ba802dd56ba52d563e0677be8c745fd925ae3bb96e6476095e75672cb86bc5b9e989ee0d95072a35a663f10228341eeea9f5266d845c7e6274e9b6e8ed526545178384519369c5228701f8f6c558e6b856ef254f1f230a6fbee4739a08ad08c67b5e0ab1bb8c698553154e987ae264b756a9fcc0b017817d7484d7e176d45ef835d0d45c7aac6c367b819fce77f308729e9a8d26e09cfbb97876275d1c51df33e056b4a4b3f37e8adc714af488c5a16c70fc240f6e8fab619a5590aba1ccc64087eca5f5ad3a7cc32c6316f122775e4b1df7504bd4b0b92ac23a447846043bec40841fa18b0f994481ff204383ec127278787868059ae169b0b4b4951d00f10be12db3812aa7228ab8c90964f63600cf20bc116b52e5736b2fa87b1883a5468ba69de177b78028cd9f4cdb63f33ddd4acda6486dec9d07c4c72ececdc62569bb6a70a7dfbea02144fa426a1fdc280d970dada512320324e1a4a0a014a4ff6c9ac9f39890c990a4935bcd660f3021b837bd60f9510833d7e3b44d3c3aaa5b4e34354228c01b318dfaf4c973a6b45058853b10e072a12b391d6cdf25054df01134ddbbeaf31b23988f403b190129b97e245d53b237f45604c7ce82cf1d829e5038d81426c9fb9ae0fac3501a3d8f8cfddadd5fc83e5f1ffe2d737af063812fc454ddd5b7826afec6916403027bcf668a47b2668f1e655c0d58a3a7be29c725bdbc7934de3f1dbe6063218c8d83bf4352ba2f489eafaaf0169527d0117a2f67ffebf7abf72915e115d144409e0c4b2a1ddd4b4a100fa5399b50b86e3fed02aed21a01dc24fdaf32b62d61efd21a3d5a5301985224300da9785c6eb89aa57b6f1fc7183b8211b75f5963e81b5e2c8904d8924804ac07f43f990309c3f91e7af6daa1c0ab6e8e5932687e47a650646ec949f7295cb0ad1d999402e4abb160f81a966f08c06273db664ec01e64d5ea5d33a96823020b091725925773b3d622af327ff98368046dc45ddb57dc1c1a4a00e756a6e1d5d5d6e07d18547f9b329012ed8433aab2bc43ebcb5679ae134868578aa263ee6afc981f65b73e078b611eccae996b9e660a4311e3e6e9caed9c46ef69912db89d434ccec820fbb9b2382e4f8583daa6d43d4bea27b443f83dc233f18eb31de347f6cbd9ce0bd70b89b9e51187175e616bec9b1f3e7d1d50d9b1c3da14204b9379442a97919c66e11685ef1b2e66352e4cd34ed830333125781c90db7b3f3f8329a6d5f72bca890c6334e2d2d08f7e2f297c64871c0d3950e426ec5c5740a84809195b2c60f730ac15741689d885b468d13c6e4d3ede8f454ecb8d8905b1a41caed294760048f260bf797aeacace725cbb93d599bcb9ed25d9c2074367693d5a7cb90ca19c4190a51956c5a54e1b8ce90a96f1086e770c1df242e7e06a73c0438a245d6f24e8c258d318955868be7f1fd85d17bbb7f4f87a218d8ad74bd3f7be509efe9a16abb56b9a0b1fe53fa16a42df673fe7aec3e44cd3efc7bb4d5f603a6f139c6ae85428bde9a04463b6e390f39ac961caa0606fdb0d04884b9ccec9c4f08a51f82c9721c50f0379e898d19a7f71b962e9f8f4bef36f9a44326ee9957dcdfb7e3feec55a0236f24cf8db6636eb7b53bcb60cfc0fc9aa70800df0addbc93f39219d236dc6a790d2299b2f7241846d06c98de38d591f7f30b171ddd91e068c024917c69a4d48dff446fda8cdc9df9fbf8af3cf64300ebfec037ec25c177709c2871532bfc2b11ff83dfd1e0929e9c90b123f091a8837f57dc58fef4645e899b7b38b9d705bb8ce533a0277", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)}) openat$urandom(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/urandom\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:44:47 executing program 0: r0 = socket(0x1, 0xb, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000440)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) 23:44:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000680)={0x29, 0x4, 0x0, {0x4, 0x3a, 0x1, 0x0, [0x0]}}, 0x29) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb10c, 0x420000) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1, 0x3, 0x4, 0x7f, 'syz1\x00', 0xa54}, 0x6, 0x30000029, 0x0, r3, 0x2, 0x20, 'syz0\x00', &(0x7f0000000040)=['\x00', '\x00'], 0x2, [], [0x7, 0x1ff, 0x5, 0x4]}) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x10000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x40405515, &(0x7f0000001000)) 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x900, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 232.649567] QAT: Invalid ioctl [ 232.656404] binder: 10051:10052 ioctl c0306201 20000000 returned -14 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002100)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/230, 0xe6}], 0x6, 0x0, 0x0, 0x3}, 0x20}, {{&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/235, 0xeb}], 0x1, &(0x7f0000000780)=""/187, 0xbb, 0xb5f}, 0x7}, {{&(0x7f0000000840)=@ax25, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)=""/141, 0x8d}, {&(0x7f0000000980)=""/239, 0xef}, {&(0x7f0000000a80)=""/120, 0x78}, {&(0x7f0000000b00)=""/35, 0x23}], 0x4, &(0x7f0000000b80)=""/52, 0x34, 0x100}, 0x5}, {{&(0x7f0000000bc0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/161, 0xa1}], 0x1, &(0x7f0000000d40)=""/18, 0x12, 0x6}, 0x55e4}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/149, 0x95}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/128, 0x80}], 0x4, &(0x7f0000002080)=""/122, 0x7a, 0xcf0}, 0x3}], 0x5, 0x2100, &(0x7f0000002240)={r4, r5+30000000}) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002340)={@loopback, @broadcast, 0x0}, &(0x7f0000002380)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000023c0)={@empty, @multicast2, 0x0}, &(0x7f0000002400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002440)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000002540)=0xe8) getpeername$packet(r1, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000025c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000026c0)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000002780)={0x11, 0x0, 0x0}, &(0x7f00000027c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002800)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8) getsockname$packet(r1, &(0x7f0000002a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002a40)=0x14) getpeername(r1, &(0x7f0000002a80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002b00)=0x80) getpeername$packet(r1, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002b80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000003180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003140)={&(0x7f00000031c0)=ANY=[@ANYBLOB="78050000", @ANYRES16=r2, @ANYBLOB="20002bbd7000ffdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="82e30008", @ANYRES32=r9, @ANYBLOB="fc00020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004002f0e000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000008000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004008000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="7c0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3d7984336dd74e6bc4f10a3c6da24237d284bc33b52e9f2f99279fbcfd631cff7bea6b1b882d70bab19896fcce98d8cd78ed57793c626646dcd466c03023f762fa56", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17], 0x578}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) getpeername(r7, &(0x7f0000002280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) 23:44:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000007c0)=""/4096) [ 232.740360] binder: 10051:10071 ioctl c0306201 20000000 returned -14 23:44:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0x2, @mcast1, 0x40}, {0xa, 0x4e24, 0x4, @remote, 0x3}, 0x7, [0x4, 0x80000001, 0xef, 0x551e8351, 0x10000, 0xfff, 0x2, 0x10000]}, 0x5c) 23:44:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 232.829821] input: syz1 as /devices/virtual/input/input137 23:44:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 23:44:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000680)={0x29, 0x4, 0x0, {0x4, 0x3a, 0x1, 0x0, [0x0]}}, 0x29) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb10c, 0x420000) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1, 0x3, 0x4, 0x7f, 'syz1\x00', 0xa54}, 0x6, 0x30000029, 0x0, r3, 0x2, 0x20, 'syz0\x00', &(0x7f0000000040)=['\x00', '\x00'], 0x2, [], [0x7, 0x1ff, 0x5, 0x4]}) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x10000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x40405515, &(0x7f0000001000)) 23:44:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x80, 0x1, 0xffffffffffffff81, 0x28c0dc4d, 0x0, 0x8, 0x5, 0x1, 0x9, 0x8000, 0x8001, 0x8, 0x80000001, 0xfffffffffffffffc, 0x9, 0x4, 0x100000000, 0x9, 0x9, 0x5c, 0x3, 0x1, 0x1f, 0x3, 0x1, 0x984d, 0x9, 0x8, 0xfffffffffffffff9, 0x6, 0x5, 0x6, 0x2b23, 0x4, 0x5, 0x0, 0x0, 0x7, 0x6, @perf_config_ext={0xfffffffffffff800, 0x7fffffff}, 0x2100, 0x70, 0x8, 0x7, 0x7, 0x1, 0x4}, r2, 0x2, r1, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="99000000ff07fee24e9eb02d4a9ac97facd49b384973ec000000006c493d3957b0505937f39e47"]) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x1000, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0xa900) 23:44:48 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x14000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 232.877969] input: syz1 as /devices/virtual/input/input138 23:44:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x2, 0x3, 0x1, 0x100000000, r1}) 23:44:48 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1300, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 23:44:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 23:44:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x84002, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0xfffffffffffffffe) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:48 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xb, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/49) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0x3ff, 0x2, {0x3, 0x2, 0x1, 0x3, 0x7}}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x9, 0x7, 0x401, 0x6ea, '\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), 0xffffffffffffffff) 23:44:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 23:44:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xb2, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x9, r2}) [ 233.548465] input: syz1 as /devices/virtual/input/input141 [ 233.611624] input: syz1 as /devices/virtual/input/input142 23:44:48 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x80, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x100) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001080)={0x14e0, 0x19, 0x15539072e93d60a9, 0x70bd27, 0x25dfdbfd, {0x1d}, [@nested={0x1250, 0xd, [@typed={0x4, 0x56}, @generic="f7bba58adb1aa0bf39e5fe8ac8a2426590ed0dfcaba1c31d880c26cbd3f9ad55eb52163329bfd4167d1685", @typed={0xc, 0x32, @u64=0x100000001}, @generic="fd2c278c370a4b76b0fed888247350a5e28e09f0ad13351778012a9c717c02be4e99fb2d7b6e76e8fa391c931807374a546978cf06ebe1f36a4bb7a52c79992f754c10bda1609859f82f58c264a9eb5f8b0edf16f70c04ace02cd33ce7886cb771a7015d0fd866d20bd461591c", @generic="66963c168827f9b7db0900fbdff00a716e4c8e040560592d6021166c607ec11e981f58ce193a7385d743a37931ef664c921042e2c5e5601a43a08d5c4b2322b1714a4e4e9f98389902a8bda4e1747bd5ff4bbbc574d8ed2c834b54355731d52faa7d39ca81226a6c8bc4b6aa29e6094c6d6e35bbe21751ff2d828938f992289b4ce1df5c5017a7c1823c12a778f0378074e5cb", @generic="e59d24f811713e35dd386e51534ef98873727543061e6b3a6dadd890899d49e589319d8c05d782716fb3ec427f98555ce800ea292f7d3a2ee9e9f341f6f736b4e56155c2b00bfcd5860777720718a24aa1874e9894ef62dddd7daa7f6c33aa0390be8de7c82d6acb1a22275add3e7490b4e1ac7fc55b4590c4c61424e579cadf42db45cf32722c19410c22fb32bfa0492d405f398b938d4fe46315b9963d827504768e643b95193a49cc1856822b401534636b538d4078b4209e162561fd17d395cac64be261d682adbe5fe74a2a6a7d264c22cd4e5df858492a42dd3a6748148871e4dc078ba731da2f6870e1e84bfa6d92e05360aa", @typed={0x18, 0x3d, @str='/dev/snd/controlC#\x00'}, @generic="d99e4dc311a633fae0eb1f2dfa04ca22dfc217dd1da5b1b0047c4a0a9f124e8c15033f0469c5364f1af61a8a57e235d361a98ee4a93c43ac99986beb6c8f12c0bf40ac94c0afb7ef7bea6cdd3a3592bdd7510777074284349fff3f22eec152862721b962b382c00bb3701946df1b09bfb8833aa96c8a68bc238758aceb78af1ac912dd627cda19308df3eb65abd2ad27fc745eecc648b75833b8d42038a3256fb8fbef3d79ae7071f4cf8e498721e5a362a1231d86f2ba731ab39203a7e83f37ccada95aa0488635523ce925118a71d4c647c252e1f31b0beeec508bc3ab866d393aafdbb977e2499bac54a2bc9960b48756387a0d7e6c3fab52a7ceac15b1336eafabcd368c60febf215df46a2e52a3fb7e80c23ee7a67eb5a660f81a27871577141948b34c4f2feacffd6d740b9e1243bf2c250eb632a584d6d931db560fb75c99a3210d4489258cf5e982922d124ed266b89dcc40249dba9b0162c3d85a8acf48903d543fb1d587edf8c7956136968c468df3d0605b509550b9ffd011b995c59005ab192076ab3cbbddb595eb63d949474d0b4c65ce5a2684299f4a0c286fd807703472cdc029604c5b1ec1c0f2be04a75ecd1bf658efde287a92d945aecc6b8f0bef37a8191451592823b88894bffc27f2391f665cab1acc06c968eccf40063873db94ee16173dad8c9ab8040bc0f9ccc7ffc01d8c9ce0d82fc9a73328c5f01d7073c3d997c3c2d792bd020f8005c0af2860eed4a38660bd38308a35f49e865d55026ffd468dc9e010de1e67495464d40d7292dd8f2d69521811f5e6f07b19ce675eff3e1fa2876d22d39f6e37621806ac7e10c1b65ce3e8287dd38c6beced2029ca44ff3a0488dac8fc668dfa3a4ce725ade205f0b551d1f797dae4ee4b99cc4af7b907b07646afda11e105e51a3f5374aee75dcd0f44a7a64a45a7ab2219f6db0dbb03554945936264d5dccaffc1df7f7877f6015f289f6e49df144619e0bd091150db020c60f86f59ade3056750a5397879a0653c9ca906139c68a25dd2da896f143896ea9e0631b29c1513ccb5652439244b464ad011cdc43dde74c3bbe90a41ae308f816c6e22b6ea8cd68a66143bf6657e4db27655da3aa542474cb26a0ac8a87509f6c349e349bbfc09bbe548af37f68b083579196bd489a5d4828e14b0c6e975272bdabdf4d5ab559b78d1524974dc6c7ecaf52e3bcfe851a2a612c3d4e30b71c0767e40dd92ac2530666a6de268b1ea7ef0aae9d2e323eea3714e662fd8fa3234da854f3e6ca378f6320bc6f258adecac344d1fe0b668f1bd41b3e27481f3718259052d2a397757f67e88d294a74ddfa00fe446f5253c2f679a48511dd3b828cc894c216704ab15aad25f6eb1d971ab2b975d1af7406b6778caf756505299ef4ca1f8795f9cffff42eca51fe6d5d5e393bd6ec8a57cbec485ebd425999707e475a7962b308f852f9d786b19b7253706206daae600fcfc995942197203729f7f929e0b9e7893c239014473a5a4292f052024c3ca134b368b3d10f4592344250ca246e205b423d89566ce4f561370e4761107040a869b08d31b8b9542c60c4e742f41a188eb3ddf685663553a23c3b7aff82033b77068c8a1c3b6c4bf6f5265f87848d0bbc7f14a6d4307465cd8c2b6895f9e2c9d61345294f310017225f297cd8f34a270f380259f53d54860618543a9ce65422dabfdc6e343e39fb19cd8a788e429e9ad425cb2376ab3816effffd9a8dd1e5a44b941e89961449faa656ae122227246382bd9455081b81e6b0538b066fe91499ec3a444ab215be2812ca1d92a2dd851d02c7b5889c446cb539e108e09439e4604750fa4cb497e36752b070039138065193faedf0100aae852ea7c1304bb2f4812b214fc6497d31efd14b962c6efbf2af57caf614a58f2751992478f6b567257b0caf1024d5821b85a97c1a173f77d7526c07128df5d819fd0382b8a9c26a6967cc2918027b508cd5f03cc38c1a6bc6a17012c64d15da9fe73f666dd6e2df2623b8f51971ff0d21cf723c137ddb53a5b20720c8aed0cc5634ae7025f15988463dd3fdbd1c74666981d436df703204ca520bf5823f64aad5082194dc326788f12bb90664b56a8b91ab147f9320e82636d99b05cb9dfcb6c0b910213568d576f9127ee94ca0392359b93edf9aa32c003bf73d83bfb3a29a92e76297a817939111f47f669abc0230c98e82756385a9290bfae0920254e9ea8ece74e9cb32cd1709a5d59ab1558ccf80039a5846b60a5b3a8a7aeb1143e503df204d2e99cf6845e87d0713b73e6362c180fb19a2c0512ec9e88404f21a0c5c33b6f80cfc8c1e0a1637622bd0b812277f3a343d7ab1d3b32440f1084ca816b28ad728932d159e669877d6337b7a2e2510222b71b7280b410f8165f68e6fdee40292f68073849e4b944e2bc7be0a579a107295635768e563a0c4f1b1f44282a9ba1bce0fb1cf0245404168988f9e6ac0e6dc0d47f463b6e484adaacdad38e5def15f273fd8391acae00cfcd02f0adf0ccde30839ae0e5c1f9e085a714331ed8da96fc1831a2789803306b719e1e3e1ec95bca4fd00366a323bf61a3a9a01573a57b98e801fe1679edd478eff2ba87933d52515230bed59e17a8c6369ffb9710ea64067155ea6af1ee526c4cf25c359a33be1fa6ac14c9ced52fb44ccac5372d0180b61f3fa36fa359f11498e41b6a1efc3966778109dc4246bba32402bf0c2b0acade1f56db664d8444f6240ce962558a25c22becf8c118115e032cc4820f94576b956a4787c9f30cc1c20862b53e1ea69ac0f1097a2fc65adf0453e55b3e2619723f55e1d29c35edb7cfe09b46f930f8fba48819bdc2ad8e6b0542ee59578fab826326b2ed732dd184da2b43f9c4617ae638b4abda38cb07cf73db57f0fd735416c532e3af786a25d61f6079db7a8471f8d96a1035c3c53e24f0c3949469ec6f4b751812f77cf5b5df4fc8efff49ce8e56c2911b0f8079e68785d5a9d185f49ece5564a8bd1645303e975a01a28dcdab7d52ff1c88ab6eb0622aa7472d86dfc8aae79a27254edbed1c251df78ae844c5eaa70d589a36006307fa35bd33b9130ae388032aadda4cdda4144e3a5a8b042c436f628bb6811af62cf3a8384a3a9f488ff8acc7e27c1fa0e1d03f9faab83cad661c2f964c9ab6929401122a027b025a161b90bacb5bd12ad002c25e677db51abcb51700ff0ece7afcc753ab1db222de6a85d75a72a32c340cce3dfa903ca892ce3a7f9932a28425e7e3421141e7048aaa4e3fecf4bff10fe98cefbcfc699e7a7e6dfba87205b27774f13fa5a10615252ed8d586015917c954ad79bd7a41775a2f1ff55f4e66c53f8f8c2a9c7e5d38e380cabf15adbb2f7ab65488c657c252d2ce52ef458e7f0f25b5e6ab8e1f7b6863a89683a29421af9f1bd3c8c6864b4f3a93fab79d8dc8719a4fc0cfbd0cfe8ebf5dd3a80b6e1323d5dcf7ecef45c6f7655c35b8c2004cf1f5a4dab44ad16b766832b5c54df5a8706c6278e6046de56e5d6735a4c091b1524f542d9a04d7d7babc64865bd206f0f4a7a62ce62e9420773bc18d9c99960da28ccef504816b93877ff8db0cf3674c92137121d43d0d723d48a09571cf1c8bb58a373892bf09259313273981066326ae45e8f045f8505f8e9f4b9b58ba1cbb19d1143d714afa238211bad44fce45a7f36946548d869fd2fe11c9b7f29249aee782ce979bd3140aedf9bd56d1e3d27c37491abad02360dfd71f1c34759a4e78c3ffee92ac78c3ca16689801359fbef9a4e54516608708a4ed603d12a7b8655a5fd390de675d3072bb9ab0ab0caf19837e50e917afce06db8ce481efeeb88ce8faaa5ab1a1be743964c6bac1de75d8467c308dfedc56d89e16f4ba31d14ef96458d3970abf138a4dad1844025dca0e6c9e6e74722525ed1b9da56471def5080654fca2dbea19e8a72b5bc3c4b84974e3ea46a11d2f5e0c6fbfcbef5b66c3758142be0619591f77acbbcc414c5d544c3c2c965b77d83d7846d2fa2f56cfcea119b84346fb1a487352baa4badb562316ede5ead4d69cd9c7b03d3ec7d2d44fdc1421ef319affaa38c1b06996a011643675e2f4510b922b0fbd9cbb333df0048557a21f2d5ccc110b6469816e5b216a5a4088ad8cdd4ea9e1624494d694aaa7a4717019d784bb028e1ec91b391299a8117c23b480099ce29ea7cdeab9a50a5b15dfc30edd14b42d2b3fbe0dae41059b74bb63b0ffe277f880c60c3218aa066df5e76b3117388dfbd24001bf8b3ed3666fa80374a660d1465fd9884013fc9feb938007ee2e433031237bdafb790d7c4d092cdc30f38fca2fdfdf0d87917b87b99566d98e21556700c983d8f281b5a95c6ce6eea537ed1dc704e50a2302e60cee059f8b80c4f57baf15320237808b29d5bf95c15e702d2aae68eb8e7b325675ed30b97ab4dfd858076c4f30361ad4c53c9c6e27921005d80d1d760a51fe08702ef0eb001a2ce3cb9c51a2d0c3f4b544532a349c8b0f73551c719a03b51dc6163d2574119deafe2849cd6373ff682563ef4f97dbb76d640a5bd58d2f93d22ba5e357f9fff24c1bdcb0ed8ba18a418b88ddd74c28ddc9ad37140d035eda4223dc531437bb5142ac5b3ac2972fa5334e49c5679acdb14878c0969fbfa13ed232f639c0cf7b93520ebd01b91a7338ec20acb96f12d1f106de12370cb05f5ceb68c5093603d736e1944e3f6944a5c84970f15fff1297668dfdac409fe07793245203a2c0c4b986b0f701a714b1fe4f2560b01b5ba40d00f3e91b69cab3d866a85f8131dc1391643a5b46125694475240eba0e9d01bff1bd10f3764762b1b209281973bbedf2d2eab6a244fbad8424b9e5c5dbd6a1c825b91042143e2249d001ac484e56ce278e38729bbc96f2b3ebe9074e92d2b0b5fe57486d7f0fa0aa23ad13d753f0370870c526d0f431d86f6c634e490dc5939ed50fede47eb6d8a47d5c831900e347a6c563a95be43787785cd36638d36949de4472f90553c9c072b0539def6ee36d8b3a436047a4eb469dbda516cdb08b5e383fc9ceff05ba986052ddef67bc1983220ae05ba0c3e76cbbd0e9df00439c599b3d719598ccf067577be7250dde7476b44ae9f1af97e80a0a002d1f7b9734bc4385fe6813d61809cf2114cc54c449b62923c44231b3fe4a5ae517325ad8a5eb84384f4058a26f1641bd8cec7a43650aaaa2170380f01e74e1d9cd53bdd0321ad84651bc8312935c4fb4531aa4a625cf59d47510db43775e45b1e8c439a437a2e41e810b1d823b4fda7711406611ae6a5bf3ebecc8d433f2b41bc0f977911ae2b0398122a7a2cba27d7f5cfa51281c759531a34c97a988e3e4e3c8b0c85ba43d1057bc98fb12fdd7c2ca2934da1b3aba63bce4557da22a01006932b9ccd458611902109415f4fdce4fcae06f64f3202b5d6cf1879a0dee74b1047b967d4530ec10fe95b3dce1941d5a6ff327a44197180eaf58375944f66361aab0cbc154581141c8c2760b1993e22df7334c8317942c6578b6da483f67bf4d5de31f87fbb566c53991a565a28ef440199b9392ee38d36ef25194245f36a962c6548c026a448e710371f1d78aee25fe141efd9de9ec8da33355c1d7046db341320a6e2c6a6076af691306d767fea4d4b047d0d7577560b927b4356c32fb8fb50e75db4f03235e6c0904df531046e5a4bd33da6d238f0dc5aae02377a3405fd7275512c627d9d4ab5e51f550c5cbd2b3f68010ff1f29dbbb48ca48458205b1c3abd177d7accbe0a8cb0551c47d42d434bd7"]}, @generic="d1b60e1ee28e19857cd6d2aa319296d2a86bf005d4ae5f650e682f21d979497509cd7a174a7e1a804790c6a2dd63bfb0d8b755c81986d9b13156923c548903aa4b1d35b95390a1af650219fc30df10d0e75dc5c2f47b5e002c7c8122b3d5adb917ed761a58532695d1f3ad529f8abd73f47d410d097fa5124b69e1559fb526a76e108c96af52199bf94f8261b339a84c296201391ab6997ef1e3cd465fe6f22661089aa63ab44bac5b24989fbf292b98d4309a908781ce7db593d4d31eae02ea40dce00831c95df719538cf7200f1baaf3e5754175773460b0f80042", @nested={0x144, 0x39, [@typed={0x4, 0x39}, @typed={0x8, 0x48, @ipv4=@local}, @generic="c3789861727d494a7de36086ff6fff5a6f4bb28afdb9a6300d08453fa4adc879d6a5189a02bf0a3a9d28f8f34cb66bace5fe04b8dad3f5e0d930495ec4bd69362a04735c7ef2240d7061fc52415d26", @generic="49315dad56c394eff18b49ffc703272e42d39c3395da6d1b3ce7788dc8dc1aaa00c8d9fd607695223fd6a699ac8419cfd6e4746737907e13f57881838c615bca6b29822d19bd1003b2da1b2ff5967b6b228ef0ba8da7", @generic="fae6b8ac775865ae7cce5b33c0910f749ba0263258f8580f260a1fc0a9cac6c2e74cbf391cded5a63328ed17274f420cd97935cee6f9eeba73cd19ab9d92e87a3be40c21e986e642962968ccc174695277d08c1cc8d92112aa77b35ae71c01ac60086ee9eb04b3aace48330e9740afe7cfe14b433d014183a3665767a967883d4b3c172319a53922b5e4b8a42a90a9"]}, @generic="8c1e6cbcd6f0a1738f5f9a653250a57bff7a80b4a5d131660ba37a2ab83629", @generic="f709cd28ff3f7b90e5dc196cc75df4315a9af9d7aec3a107443ad329a5179966422590b3ce42f047df90166ad09d49771044caa78d", @typed={0x8, 0x2c, @uid=r2}]}, 0x14e0}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 23:44:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 23:44:48 executing program 5 (fault-call:1 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:48 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x12, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:48 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x4000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 233.732133] FAULT_INJECTION: forcing a failure. [ 233.732133] name failslab, interval 1, probability 0, space 0, times 0 23:44:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r1, r2) [ 233.788507] CPU: 0 PID: 10162 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #271 [ 233.795929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.795936] Call Trace: [ 233.795965] dump_stack+0x1c4/0x2b4 [ 233.795989] ? dump_stack_print_info.cold.2+0x52/0x52 [ 233.816767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.822319] ? process_measurement+0x280/0x1bf0 [ 233.827011] should_fail.cold.4+0xa/0x17 [ 233.831089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 233.836206] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 233.841507] ? mark_held_locks+0x130/0x130 [ 233.845757] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 233.845787] ? mark_held_locks+0x130/0x130 [ 233.855460] ? fs_reclaim_acquire+0x20/0x20 [ 233.860050] ? lock_downgrade+0x900/0x900 [ 233.864200] ? ___might_sleep+0x1ed/0x300 [ 233.868344] ? arch_local_save_flags+0x40/0x40 [ 233.872923] ? mark_held_locks+0x130/0x130 [ 233.877172] __should_failslab+0x124/0x180 [ 233.881401] should_failslab+0x9/0x14 [ 233.885282] kmem_cache_alloc_node_trace+0x270/0x740 [ 233.890389] __get_vm_area_node+0x130/0x3a0 [ 233.894709] __vmalloc_node_range+0xc4/0x750 [ 233.899110] ? bpf_prog_alloc+0xe3/0x3e0 [ 233.903168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 233.908709] __vmalloc+0x45/0x50 [ 233.912577] ? bpf_prog_alloc+0xe3/0x3e0 [ 233.916639] bpf_prog_alloc+0xe3/0x3e0 [ 233.920518] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 233.925352] ? trace_hardirqs_on+0xbd/0x310 [ 233.929662] ? lock_release+0x970/0x970 [ 233.933626] ? lock_sock_nested+0xe2/0x120 [ 233.937862] __get_filter+0xf1/0x280 [ 233.941570] sk_attach_filter+0x1d/0x90 [ 233.945539] sock_setsockopt+0x103f/0x2280 [ 233.949782] ? sock_enable_timestamp+0xe0/0xe0 [ 233.954364] ? proc_cwd_link+0x1d0/0x1d0 [ 233.958444] ? aa_sk_perm+0x218/0x8b0 [ 233.962243] ? fget_raw+0x20/0x20 [ 233.965695] ? aa_af_perm+0x5a0/0x5a0 [ 233.969502] ? check_preemption_disabled+0x48/0x200 [ 233.974521] ? fsnotify_first_mark+0x350/0x350 [ 233.979095] ? __fsnotify_parent+0xcc/0x420 [ 233.983412] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 233.988350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.993893] ? security_socket_setsockopt+0x94/0xc0 [ 233.998902] __sys_setsockopt+0x304/0x3c0 [ 234.003054] ? kernel_accept+0x310/0x310 [ 234.007194] ? ksys_write+0x1ae/0x260 [ 234.010988] ? trace_hardirqs_on+0xbd/0x310 [ 234.015301] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.020655] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 234.026101] __x64_sys_setsockopt+0xbe/0x150 [ 234.030503] do_syscall_64+0x1b9/0x820 [ 234.034382] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 234.039754] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.044675] ? trace_hardirqs_on_caller+0x310/0x310 [ 234.049680] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.054689] ? recalc_sigpending_tsk+0x180/0x180 [ 234.059433] ? kasan_check_write+0x14/0x20 [ 234.063681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.068522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.073791] RIP: 0033:0x457579 [ 234.076976] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.095956] RSP: 002b:00007f0b28ab2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.103670] RAX: ffffffffffffffda RBX: 00007f0b28ab2c90 RCX: 0000000000457579 [ 234.111103] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 234.118375] RBP: 000000000072bf00 R08: 0000000000000010 R09: 0000000000000000 [ 234.125746] R10: 0000000020ab9ff0 R11: 0000000000000246 R12: 00007f0b28ab36d4 [ 234.133006] R13: 00000000004c3b75 R14: 00000000004d5c88 R15: 0000000000000005 23:44:49 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x29, 0x400) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = semget(0x1, 0x1, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000280)={0x1, &(0x7f0000000140)=""/107, &(0x7f0000000240)=[{0x1f, 0x7e, 0x2, &(0x7f00000001c0)=""/126}]}) semctl$IPC_RMID(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) getpeername(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) [ 234.162606] input: syz1 as /devices/virtual/input/input143 [ 234.195221] input: syz1 as /devices/virtual/input/input144 [ 234.209484] syz-executor5: vmalloc: allocation failure: 4096 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 234.228699] syz-executor5 cpuset=syz5 mems_allowed=0 [ 234.242949] CPU: 1 PID: 10162 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #271 [ 234.250352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.250359] Call Trace: [ 234.250382] dump_stack+0x1c4/0x2b4 [ 234.250401] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.250421] ? mark_held_locks+0x130/0x130 [ 234.250443] warn_alloc.cold.119+0xb7/0x1bd [ 234.250460] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 234.250473] ? kasan_kmalloc+0x9b/0xe0 [ 234.250506] ? __get_vm_area_node+0x2e5/0x3a0 [ 234.250528] __vmalloc_node_range+0x472/0x750 [ 234.262489] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.262511] __vmalloc+0x45/0x50 [ 234.271389] ? bpf_prog_alloc+0xe3/0x3e0 [ 234.271406] bpf_prog_alloc+0xe3/0x3e0 [ 234.271423] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 234.271441] ? trace_hardirqs_on+0xbd/0x310 [ 234.279972] ? lock_release+0x970/0x970 [ 234.279990] ? lock_sock_nested+0xe2/0x120 [ 234.280017] __get_filter+0xf1/0x280 [ 234.280036] sk_attach_filter+0x1d/0x90 [ 234.288742] sock_setsockopt+0x103f/0x2280 [ 234.288758] ? sock_enable_timestamp+0xe0/0xe0 [ 234.288785] ? proc_cwd_link+0x1d0/0x1d0 [ 234.297766] ? aa_sk_perm+0x218/0x8b0 [ 234.297787] ? fget_raw+0x20/0x20 [ 234.306674] ? aa_af_perm+0x5a0/0x5a0 [ 234.306696] ? check_preemption_disabled+0x48/0x200 [ 234.314616] ? fsnotify_first_mark+0x350/0x350 [ 234.314635] ? __fsnotify_parent+0xcc/0x420 [ 234.323771] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 234.323793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.331975] ? security_socket_setsockopt+0x94/0xc0 [ 234.331994] __sys_setsockopt+0x304/0x3c0 [ 234.332009] ? kernel_accept+0x310/0x310 [ 234.332028] ? ksys_write+0x1ae/0x260 [ 234.339689] ? trace_hardirqs_on+0xbd/0x310 [ 234.339706] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.339722] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 234.339741] __x64_sys_setsockopt+0xbe/0x150 [ 234.339761] do_syscall_64+0x1b9/0x820 [ 234.348545] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 234.348573] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.348592] ? trace_hardirqs_on_caller+0x310/0x310 [ 234.356445] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.356460] ? recalc_sigpending_tsk+0x180/0x180 [ 234.356476] ? kasan_check_write+0x14/0x20 [ 234.363702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.363725] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.467770] RIP: 0033:0x457579 [ 234.470959] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.489853] RSP: 002b:00007f0b28ab2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.497562] RAX: ffffffffffffffda RBX: 00007f0b28ab2c90 RCX: 0000000000457579 [ 234.504822] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 23:44:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410000, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x547, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 234.512080] RBP: 000000000072bf00 R08: 0000000000000010 R09: 0000000000000000 [ 234.519351] R10: 0000000020ab9ff0 R11: 0000000000000246 R12: 00007f0b28ab36d4 [ 234.526613] R13: 00000000004c3b75 R14: 00000000004d5c88 R15: 0000000000000005 [ 234.539760] Mem-Info: [ 234.542288] active_anon:125458 inactive_anon:112 isolated_anon:0 [ 234.542288] active_file:7723 inactive_file:36627 isolated_file:0 [ 234.542288] unevictable:0 dirty:357 writeback:0 unstable:0 23:44:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 234.542288] slab_reclaimable:10640 slab_unreclaimable:115634 [ 234.542288] mapped:55163 shmem:127 pagetables:1211 bounce:0 [ 234.542288] free:1251231 free_pcp:835 free_cma:0 [ 234.594482] FAULT_INJECTION: forcing a failure. [ 234.594482] name failslab, interval 1, probability 0, space 0, times 0 23:44:49 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x6, 0x0, 0x8, 0x7, 0x3, 0x3f, 0x4, 0x2a, 0x20, 0x0, 0xad8, 0x4}, {0x1f, 0x722, 0x0, 0x4245, 0xffffffffffff7fff, 0x9, 0x1495, 0x510, 0xfff, 0x80000000, 0x6, 0x1f55, 0x91f}, {0x36e, 0x1, 0x7ff, 0x5, 0x80000000, 0x0, 0x9035193, 0x4, 0xfff, 0x9, 0x2d8, 0x1, 0x1}], 0x31d}) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) 23:44:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 234.599766] Node 0 active_anon:499736kB inactive_anon:448kB active_file:30892kB inactive_file:146508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220652kB dirty:1428kB writeback:0kB shmem:508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 329728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 234.626006] CPU: 0 PID: 10193 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #271 [ 234.641768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.651130] Call Trace: [ 234.653736] dump_stack+0x1c4/0x2b4 [ 234.657381] ? dump_stack_print_info.cold.2+0x52/0x52 [ 234.662608] should_fail.cold.4+0xa/0x17 [ 234.666692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 234.671894] ? perf_trace_lock_acquire+0x15b/0x800 [ 234.676833] ? mutex_unlock+0xd/0x10 [ 234.680555] ? _synchronize_rcu_expedited+0xa6b/0xfd0 [ 234.680570] ? perf_trace_lock+0x7a0/0x7a0 [ 234.680584] ? sync_rcu_exp_select_cpus+0x9e0/0x9e0 [ 234.680598] ? finish_wait+0x430/0x430 [ 234.680615] ? do_raw_spin_unlock+0xa7/0x2f0 [ 234.690013] ? trace_hardirqs_on+0x310/0x310 [ 234.690036] ? fs_reclaim_acquire+0x20/0x20 [ 234.690050] ? lock_downgrade+0x900/0x900 [ 234.690068] ? ___might_sleep+0x1ed/0x300 [ 234.690081] ? arch_local_save_flags+0x40/0x40 [ 234.690094] ? dev_map_notification+0x4e6/0x690 [ 234.690115] __should_failslab+0x124/0x180 [ 234.690129] should_failslab+0x9/0x14 [ 234.690144] kmem_cache_alloc_trace+0x2d7/0x750 [ 234.690166] netdevice_event+0x34d/0x1080 [ 234.690180] ? update_gid_event_work_handler+0xc0/0xc0 [ 234.690194] ? dev_map_free+0x690/0x690 [ 234.690206] ? kasan_check_write+0x14/0x20 [ 234.690222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.690233] ? _roce_del_all_netdev_gids+0x30/0x30 [ 234.690252] ? roce_gid_type_mask_support+0x100/0x100 [ 234.699151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.699168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.699190] notifier_call_chain+0x17e/0x380 [ 234.703781] Node 0 [ 234.708002] ? unregister_die_notifier+0x20/0x20 [ 234.708015] ? dev_shutdown+0x3d0/0x5da [ 234.708036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.722780] DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.725179] ? rtnl_is_locked+0xb5/0xf0 [ 234.725194] ? rtnl_trylock+0x20/0x20 [ 234.725219] raw_notifier_call_chain+0x2d/0x40 [ 234.739149] lowmem_reserve[]: [ 234.742554] call_netdevice_notifiers_info+0x3f/0x90 [ 234.742570] ? tun_show_group+0x180/0x180 [ 234.742584] rollback_registered_many+0xb7a/0x1210 [ 234.742602] ? generic_xdp_install+0x4c0/0x4c0 [ 234.742643] ? lock_downgrade+0x900/0x900 [ 234.742658] rollback_registered+0x1e9/0x420 [ 234.742672] ? rollback_registered_many+0x1210/0x1210 [ 234.742685] ? trace_hardirqs_on+0xbd/0x310 [ 234.742698] ? linkwatch_schedule_work+0x150/0x170 [ 234.742717] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 234.742731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.742745] ? rtnl_is_locked+0xb5/0xf0 [ 234.742758] ? rtnl_trylock+0x20/0x20 [ 234.742773] ? queue_delayed_work_on+0x130/0x1f0 [ 234.742789] unregister_netdevice_queue+0x321/0x5e0 [ 234.742802] ? rollback_registered+0x420/0x420 [ 234.742814] ? linkwatch_schedule_work+0x170/0x170 [ 234.742826] ? tun_show_owner+0x170/0x170 [ 234.742839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.742854] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 234.742869] ? __tun_detach+0x6ba/0x15c0 [ 234.947620] __tun_detach+0x11b8/0x15c0 [ 234.951586] ? tun_attach+0x1840/0x1840 [ 234.955555] ? debug_smp_processor_id+0x1c/0x20 [ 234.960221] ? perf_trace_lock_acquire+0x15b/0x800 [ 234.965140] ? trace_hardirqs_on+0xbd/0x310 [ 234.969449] ? perf_trace_lock+0x7a0/0x7a0 [ 234.973672] ? do_raw_spin_lock+0xc1/0x200 [ 234.977902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.983430] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.988954] ? locks_remove_file+0x3c6/0x5c0 [ 234.993349] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 234.998872] ? ima_file_free+0x132/0x650 [ 235.002925] ? ima_file_check+0x130/0x130 [ 235.007060] ? fsnotify+0x12f0/0x12f0 [ 235.010855] ? __tun_detach+0x15c0/0x15c0 [ 235.014987] tun_chr_close+0xe3/0x180 [ 235.018779] __fput+0x385/0xa30 [ 235.022050] ? get_max_files+0x20/0x20 [ 235.025925] ? trace_hardirqs_on+0xbd/0x310 [ 235.030235] ? kasan_check_read+0x11/0x20 [ 235.034373] ? task_work_run+0x1af/0x2a0 [ 235.038432] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.043871] ? kasan_check_write+0x14/0x20 [ 235.048096] ? do_raw_spin_lock+0xc1/0x200 [ 235.052319] ____fput+0x15/0x20 [ 235.055585] task_work_run+0x1e8/0x2a0 [ 235.059465] ? task_work_cancel+0x240/0x240 [ 235.063777] ? wake_up_q+0x100/0x100 [ 235.067484] get_signal+0x155e/0x1980 [ 235.071276] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.076825] ? ptrace_notify+0x130/0x130 [ 235.081382] ? tun_get+0x22d/0x370 [ 235.084910] ? tun_chr_close+0x180/0x180 [ 235.088960] ? proc_fail_nth_write+0x9e/0x210 [ 235.093440] ? proc_cwd_link+0x1d0/0x1d0 [ 235.097492] do_signal+0x9c/0x21e0 [ 235.101022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.106551] ? __vfs_read+0x11f/0x9b0 [ 235.110344] ? vfs_copy_file_range+0xb90/0xb90 [ 235.114913] ? setup_sigcontext+0x7d0/0x7d0 [ 235.119224] ? check_preemption_disabled+0x48/0x200 [ 235.124236] ? kick_process+0xed/0x170 [ 235.128110] ? task_work_add+0x123/0x1f0 [ 235.132159] ? cpumask_weight.constprop.5+0x3f/0x3f [ 235.137162] ? trace_hardirqs_on+0xbd/0x310 [ 235.141475] ? do_syscall_64+0x6be/0x820 [ 235.145529] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.150985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.156506] ? fput+0x130/0x1a0 [ 235.159785] exit_to_usermode_loop+0x2e5/0x380 [ 235.164359] ? syscall_slow_exit_work+0x520/0x520 [ 235.169197] do_syscall_64+0x6be/0x820 [ 235.173071] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 235.178424] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.183345] ? trace_hardirqs_on_caller+0x310/0x310 [ 235.188349] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.193351] ? recalc_sigpending_tsk+0x180/0x180 [ 235.198096] ? kasan_check_write+0x14/0x20 [ 235.202322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.207158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.212335] RIP: 0033:0x457579 [ 235.215526] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.234415] RSP: 002b:00007f6131775c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 235.242115] RAX: fffffffffffffe00 RBX: 00007f6131775c90 RCX: 0000000000457579 [ 235.249369] RDX: 0000000000000128 RSI: 00000000200000c0 RDI: 0000000000000003 [ 235.256624] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 235.263881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f61317766d4 [ 235.271135] R13: 00000000004c3094 R14: 00000000004d4a28 R15: 0000000000000005 [ 235.295935] 0 2819 6323 6323 [ 235.299166] Node 0 DMA32 free:2889372kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890736kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1364kB local_pcp:1364kB free_cma:0kB [ 235.331854] lowmem_reserve[]: 0 0 3503 3503 [ 235.336313] Node 0 Normal free:2106308kB min:37352kB low:46688kB high:56024kB active_anon:497644kB inactive_anon:448kB active_file:30892kB inactive_file:146508kB unevictable:0kB writepending:1428kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5728kB pagetables:4696kB bounce:0kB free_pcp:2108kB local_pcp:904kB free_cma:0kB [ 235.367687] lowmem_reserve[]: 0 0 0 0 [ 235.373079] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 235.387224] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 703*4096kB (M) = 2889372kB [ 235.403012] Node 0 Normal: 7577*4kB (UME) 2208*8kB (UME) 1834*16kB (UME) 1188*32kB (UME) 571*64kB (UME) 116*128kB (UM) 7*256kB (U) 3*512kB (UM) 2*1024kB (UM) 4*2048kB (UME) 470*4096kB (M) = 2105412kB [ 235.421587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.430902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 235.439946] 44478 total pagecache pages [ 235.443979] 0 pages in swap cache [ 235.447466] Swap cache stats: add 0, delete 0, find 0/0 [ 235.456752] Free swap = 0kB [ 235.460603] Total swap = 0kB [ 235.464096] 1965979 pages RAM [ 235.467257] 0 pages HighMem/MovableOnly [ 235.471826] 342307 pages reserved [ 235.475335] 0 pages cma reserved 23:44:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:50 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x9000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r2 = dup3(r1, r1, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xffff, @empty, 0x6}, @in6={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0xb}, 0x2b5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0x7e, @remote, 0xff}, @in6={0xa, 0x4e23, 0x8, @remote, 0x100000001}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x23}], 0x9c) 23:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 23:44:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x4e, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 235.584360] input: syz1 as /devices/virtual/input/input145 23:44:50 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xc00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x18c678, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) [ 235.674570] input: syz1 as /devices/virtual/input/input146 23:44:50 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xa, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101800, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffc1}, &(0x7f00000000c0)=0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x5, 0x7, 0x8, 0x8, 0x2}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x3, 0x0, 0xc}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000000)={0x5, 0x8000, 0x5}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r4 = gettid() capset(&(0x7f0000000240)={0x399f1736, r4}, &(0x7f0000000280)={0x8, 0x9, 0x3, 0x1, 0x3, 0x8}) 23:44:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x200001e8, 0x0) 23:44:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r1, 0x1) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$netlink(r1, &(0x7f0000000140)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="68040000100000002dbd7000fddbdf25dc005200a9060e92149bec31c740a181336e28f9a31d8e1a5293af5e53f369d39b22196287228d4a4d0dfaccf8781e86fd74a717a79068444c22ed4c8db0a0269e62472a6429b663803c75c2b45de5661cc9356938ad7483f3c16bd8214a944a74bdc962c798e4ae7794bc33ff7af4915f848c0444269fa917cdcdce8a0cac22f4c835df8f32c89f5e591188da2b5110e16465f29adb368de33e113f02a2dc6440a20931f8d01924cdc936d6c2170a76fd84f5c9230f260f945ae547af30b5b234b6b08ea9d214fa683821a512c42dad46b0ee73c9ec12b18d92c3a2c4db412c192c7c82f926d59c57f21216c4c39f06e8d7e86b3ba2e2ae23b5b66ae4c3a4f5d862223c542d23ef6540deacb0e804fe3b0f1301cf678f6a117eb88ff522760a16771110f0b3c947bdf96ef38dafc887f93acf461f4efc6eddea63333cc1c816e7cf365262c6a9f32e4df94f080846a510cf2589c8159e8f1f43c4b1b2eded972182f40003a1e5f0d2eadc16117da5c040481b15e32ba93b743d1a18fae169b269aedd53efb21dae17991cd8a6c6742eb7a47e8db730e9b57ef722da528d5099746b04b1e8d03a87561306767ea35b5d0af0bae2eca2a4364d33f129c616471b47b48268ba34207319d8a834609904f5ed529f21e14f23fca6e43882a500f8243fd8af0000006eac0d8dedc99cb51c96f98fddfc9273614fbb728057decf46ee7d734d3402ce7a77eecb88e7e0f4fe208853f9176ca33d150c3d294362206b1dea33b0fc2215693dec10244332f9298d1929bec672106964a90e7959b1bc8bac4163f51d9c7cb2b268f367d158b7f1359e9c86dab5cedfc9952a9b831e4f17ddb89e6402d0563c0194005397514444c553afb1349707476308004100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="612ea1dd55c79ad8e212df458d17825d9eb4f277e75e17c3ae9957f2902675a945b6778bd79fb8e2bd8c681d2521807988679c2517e2d2797eb465ba126d6ae07b0e4ffcd59418ae504c573c5e7c620d7f68c3ef90ed0679f56f3b643c90cd7eb5ddf2aac48d4f8778226a35184873bcc921e91f137751a8db628283e32b197c0abacaa2c090ba2b4b4c4c000000"], 0x468}], 0x1, 0x0, 0x0, 0x4040000}, 0x4000) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:51 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x9, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x3, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 23:44:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200400, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1000000000000129}, 0xfffffffffffffe81) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:51 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) r0 = semget(0x1, 0x0, 0x4) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/38) [ 236.486972] input: syz1 as /devices/virtual/input/input147 23:44:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x6, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:51 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:51 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xd000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x10000, 0x6000, 0x80000000, 0x40008459, 0x4}) 23:44:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xb87, 0x0, 0x870f, 0x5, 0x0, 0xffffffffffffff98, 0x800, 0x8, 0xfffffffffffffffa, 0x33, 0x3f, 0x0, 0x4, 0x7, 0x80, 0x60, 0x5, 0x6, 0x8000, 0x7, 0x2, 0x3, 0x9, 0x82d3, 0x983, 0x13a, 0x7, 0x8, 0x3, 0x20, 0x2, 0x2, 0x9, 0x3ff, 0x7fff, 0xff, 0x0, 0x1f, 0x2, @perf_config_ext={0x3, 0x6}, 0x28104, 0x1, 0xffff, 0x1, 0x7, 0xe6, 0x1}, r1, 0x10, r2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 236.719785] input: syz1 as /devices/virtual/input/input149 [ 236.748183] input: syz1 as /devices/virtual/input/input150 23:44:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x9, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 23:44:52 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x8000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0xd8, 0x2, 0x0, 0x1, 0x7fffffff, 0x8, "e723b07b933d322b76561c1fd5e7a66d6c34a81d90a06a5bc51802294df7b04bccf5338a454cfc3141b01983c9e51092beb73af74d4771e60bd4d601616e5bc94ac246deb1c0d12e059b4df849130afeca72472368652a19687ae9c2549dbf157932115259536bdf7010c0e2abd3a5311171c9df07dc8bef95b3570217e3d1111e51663d7bebbfecadfd1104fa35ad768060c51381865888ea17242d230204716cf1287d9dc0a2602b479aeb220228d0d33a4cf001341196ec7172bfedd5ac08af2bf7991364fac1fb5f32242b972391d5272acacf9de9db"}, 0x1f0) set_thread_area(&(0x7f0000000000)={0x20, 0x20001000, 0xffffffffffffffff, 0x0, 0x4, 0x9, 0x8001, 0x2, 0x4, 0x3f}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x6, 0x0, 0x9, 'syz0\x00', 0x5}, 0x0, [0x80000001, 0x100000001, 0x2, 0x6, 0x6c8c, 0x2, 0x8, 0xfffffffffffffc01, 0x9f1, 0x7, 0x7fff, 0x0, 0x4, 0x5, 0xdeb, 0x3, 0x10000, 0x20, 0xfffffffffffffffa, 0x8001, 0x2, 0x4, 0x0, 0x1f, 0x2, 0x1ff, 0x100, 0xa2, 0x400, 0x3, 0x1, 0x7, 0x9, 0x437d8291, 0x0, 0x2, 0x6, 0x492f, 0x400, 0x1, 0x99, 0xfffffffffffffe00, 0x8, 0x9, 0x8, 0x8001, 0x1ff, 0x2f8, 0x2, 0xffff, 0x594, 0x3, 0x3, 0x4, 0x6, 0x401, 0x81, 0x1, 0x81, 0x3ac, 0x8000, 0x14, 0x4, 0x0, 0x3, 0x1a200000000, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0x6, 0x8001, 0x3956, 0x7, 0x8, 0x101, 0x2, 0x4, 0x7f, 0x4, 0x8, 0x40000000, 0x100000001, 0x35, 0x400, 0x4, 0x8, 0x2, 0xd1, 0x7738, 0x9, 0x7, 0x1f, 0x8, 0x3, 0x9, 0x2, 0xee, 0x8, 0x6, 0x4, 0x3, 0x2, 0x7, 0x1, 0x1, 0x49, 0x1f, 0x99, 0x5, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0xffffffffffff3c16, 0x51, 0x5, 0x4, 0x1, 0x3, 0x0, 0x5, 0xeda, 0x7fff, 0xff, 0xfff, 0xffffffffffffffac], {0x0, 0x989680}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) 23:44:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x13, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 237.456572] input: syz1 as /devices/virtual/input/input151 23:44:52 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x7000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 237.509145] input: syz1 as /devices/virtual/input/input152 23:44:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 23:44:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0xffffff1f, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0xffff8801c0839218, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x80ffff, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f00000000c0)) 23:44:53 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x32, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000140)={0x6, 0xca92}) 23:44:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 23:44:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) fchmod(r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000100)=""/39, 0x27, 0x0) 23:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0xcf, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 238.381067] input: syz1 as /devices/virtual/input/input153 23:44:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x5}) 23:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x2, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x26000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 238.435025] input: syz1 as /devices/virtual/input/input154 23:44:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x5, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:53 executing program 0: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xbb8f, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$xdp(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="42c6efc3c9ce059d2bdfd6babbb046b6d260fac5661a45146abd0887596ee01f17a0aa1bdd2c0994e6ee96fd855a5e9c79d8f09347b23f2b9e65a97e3654432e22d2ebf1572c94fe04c47fbe4958e5ca2c41", 0x52}, {&(0x7f00000000c0)="9daeeb7b7927771c38b2e718f0e9e8cddcf880e17172739a31eeb779ec11a3c8c69218260694b372c0af1663f41f5e44e649c49ba3ea42e46add51d0014eb8b8098a767303329a2894fe85a21fd73f13414f3cc4bca281a087458657fdbc7473cad1b999a50704d750b85799a7bdd7fc9fffbb8d75814d148cd5bd6461685de0a908641cc77e7f2cff39370cc901b900ceb5a311e8a0c96ce8c76b5cb9f980081b8656f205ceb4225e96ca97a715d6428ab1eba698cf1a7b3e7dec9c9a75a988fb49724ab2e57e75bff83030ea692a2b245227c9e02a81b8130929f6f6f6bfddb5b31d1b4812aea7bfd950ee6ec026946f0a0da1ec76d1fc6a36f37885", 0xfffffcfa}, {&(0x7f00000001c0)="a70292579ba07af1af3d076327d3871196642bc206b8a61a230e622d76d29c2918821b15edd73c5e972bff12b2ef89f168347db9a52707006fc163e62176c16136605a58546b86d5412d02dacbc083cbceaf55ca912a3cd8e96bc7237f6e6fcba59c29bba3b6775b0a7dd10b9907b0a6270ccb2e0c8aa2928b2f068d78d8e02d80ab51b4", 0x3f8}, {&(0x7f0000000280)="739e531a0b79634aafb584f2147fe948334041e651d27258c486fb221d839fbfaf701b2e0ace9bb44be7b9edd8f7cd0d8c354bd8b5265464fff5a484a1bd9ddd200b7ed2cab2404294c5a3e2e5637191342e171e9c08b329d9bb81d051f650d36851a51e0bd2895e5c53f72c19a8", 0x6e}, {&(0x7f0000000300)="780a46dc826ff14f941dc87c73e648a059bc79ba68482dce8a442d722d565c2b386610675eed3aa157abcee9cb8e1115fb432603d891afc833ad6909abeb5c97bc33a5d70246373b3094d2e362245e5b449ee436d113cdeef635641fd812b5dfba0b5944a44bbd217aba2bcff10947748ad184b70d673b4bc4267d9b2e1750a84ac2f6bd1d3dcf77383f33d2c3c0fc6241a292fbadd61dc7764446f59f", 0x9d}], 0x5, 0x0, 0x0, 0x24000000}, 0x10) r3 = getuid() getgroups(0x2, &(0x7f0000000480)=[0xee00, 0xee01]) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x2, {0x8, {0x89, 0x4, 0x4}, 0x120, r3, r4, 0x5, 0x72be, 0x200, 0x8, 0x8000, 0x5, 0x0, 0x77390a4f, 0x7ff, 0x0, 0x9a, 0x200, 0xfffffffffffffffc, 0x2, 0x40}}, 0xa0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x1d, 0xfff, 0x80a, 0x80000000, 0x0, 0xfffffffffffffffe, 0x20004, 0x3, 0x7552, 0x9, 0x6, 0xc25, 0x101, 0x9, 0x8001, 0x8, 0x0, 0x3, 0x7f, 0x260, 0x3, 0x3, 0x4, 0x1, 0x8, 0x4, 0xa13, 0x61, 0x839, 0x4, 0x80000001, 0x8b08, 0x1, 0x4, 0x1, 0x8001, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000400), 0x7}, 0x20000, 0x7, 0x0, 0x7, 0x35, 0x5, 0xc3}, r5, 0x9, r0, 0x8) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000000000)) 23:44:53 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:53 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x21) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 238.642656] input: syz1 as /devices/virtual/input/input155 23:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 23:44:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:53 executing program 0: r0 = getpgrp(0x0) r1 = getpgid(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) kcmp(r0, r1, 0x0, r2, r3) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockname$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000180)=0x1c) r5 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x113200, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x7, r7, 0x3}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x40405515, &(0x7f0000001000)) [ 238.734738] input: syz1 as /devices/virtual/input/input156 23:44:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x440080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000800)={r2, 0x10}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x0, r5, 0x3c, 0x1, @ib={0x1b, 0x1, 0xfff, {"ad863c8c58e513ad8a58020f14a2e910"}, 0x1, 0x1, 0xbd}}}, 0xa0) 23:44:54 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xd00, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) [ 238.894553] input: syz1 as /devices/virtual/input/input157 [ 238.949751] input: syz1 as /devices/virtual/input/input158 23:44:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fcntl$setflags(r0, 0x2, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x38e, 0x100, 0x2) 23:44:54 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1100, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 23:44:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r1 = accept4$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0) setsockopt(r1, 0x5, 0x5f0f, &(0x7f0000000100)="57a532318400debc8a1170e741678bd3515782c9dcbe3491604344183ea4dd6d880182002fe1eae7b4b6443e54a3c82d8ee5901697557a722f82139f0d0196c5b4e0698870759d90d8b9c65f90799adbaf9f78051fcb4993cd321c22a5efd7b025d1642e21c7030e846f12a6c4271f315f6c63dfc0e3329240d44df2eb410f2586d29672935875a476b976e89775bd09762823c824c741c4cc20317d7f1067cd49bd577fbcf9647071b02668a87d40e6a863fd94449d1285485f2ac4185bf879b6cd6746a2fae280847f67615960eabfb7b8a81c56dd957e7dc1e1b86f45ce", 0xdf) io_setup(0x100, &(0x7f0000000200)=0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000880)=@sack_info={0x0, 0x7, 0x475}, &(0x7f00000008c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000900)={r4, 0x3}, &(0x7f0000000940)=0x8) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000240)="d1cdd856888ba299ed45f1e0eda810e9832dd519d92f4baf06005685e2b0d7c49d800b58f8a26ada733e74e9383aec4ab998c5cea8398ddf711113ad216c8d36b1a589d5ed7c36a66deeeab4440b39c44fa0877422cec5e9d98efedfbf3a75f35718bf2760c3136c04a5b680ac2af5d3934c11583b4af893527c821b7103d5d9d90ee2c2350109b91faf7b795c719958ff7942c041ac", 0x96, 0x5, 0x0, 0x1, r3}, &(0x7f0000000800)) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KDSKBLED(r0, 0x4b65, 0x9) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30, 0x5, 0x3f}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8205, 0x7fffffff, 0x2a8db57a, r1}, &(0x7f00000000c0)=0xfffffffffffffe47) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000100)='/dev/snd/controlC#\x00') perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x40405515, &(0x7f0000001000)) 23:44:54 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x12000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 239.561086] input: syz1 as /devices/virtual/input/input159 [ 239.592985] input: syz1 as /devices/virtual/input/input160 23:44:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8000, 0x802) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x1, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x2}, 0x8) alarm(0x6) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x2000000000000005, 0x0, 0x0, 0xc}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) 23:44:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 23:44:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x0, 0x5, 0x6, 0x400, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 23:44:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x500, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 240.547659] input: syz1 as /devices/virtual/input/input161 [ 240.593449] input: syz1 as /devices/virtual/input/input162 23:44:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 23:44:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:55 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x2000e) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000001c0)=0x10000) getsockname(r2, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@mcast2, 0x5, r3}) bind$vsock_dgram(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000240)=0x8, 0x8) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x0, 0xffffffffffffff9c}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000000000)) 23:44:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fffffff, 0x2) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:44:56 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x2600, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:56 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/167, 0xa7}], 0x2, &(0x7f0000000240)=""/143, 0x8f, 0x9f}, 0x4}, {{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/74, 0x4a}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/76, 0x4c}, {&(0x7f0000000b40)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/222, 0xde}, {&(0x7f0000000cc0)=""/37, 0x25}, {&(0x7f0000000d00)=""/223, 0xdf}], 0xa, &(0x7f0000000ec0)=""/4096, 0x1000, 0x7}, 0xf0e7}], 0x2, 0x100, &(0x7f0000001f40)={0x77359400}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002000)=[@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x4}, @in6={0xa, 0x4e24, 0x6, @remote, 0xfffffffffffff0d9}, @in={0x2, 0x4e21, @remote}], 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:44:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000001c0)={0x18, 0x0, 0x7, {0x40}}, 0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x300c0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x1, 0x5, 0x1, 0xc0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x3, 0xff, 0x1000, 0x401, 0x4, 0x7, 0x800, 0x40, 0x80000000, 0x7, 0x8, 0x4, 0x1ff, 0x1ff, 0x87, 0x6, 0x1, 0x9, 0xfe7, 0x400, 0x8, 0x80000001, 0x7, 0xf2, 0x5, 0x4, 0x1c00000000000, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x201, 0x9, 0x20, 0x7, 0x7, 0x1ea8, 0x4}, r3, 0x6, 0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000200)=""/35) 23:44:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 241.495858] input: syz1 as /devices/virtual/input/input163 23:44:56 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x20000) tee(r0, r0, 0x1, 0xd) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000000040)) 23:44:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 23:44:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84101, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x7) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:56 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0xfffffffffffffffc, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000000040)) [ 241.691593] input: syz1 as /devices/virtual/input/input165 [ 241.763127] input: syz1 as /devices/virtual/input/input166 23:44:57 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xb000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x80000000000000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10003, 0x8001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2}) 23:44:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 23:44:57 executing program 0: socketpair(0x3, 0x7, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x80000000, 0x3, 0xffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2) accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) 23:44:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x46c00, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x2000000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x40, {0xf1c8, 0x4, 0x0, 0x7, 0x0, 0xe89}}) r1 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) tgkill(r1, r2, 0x40) 23:44:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x19, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 242.402486] input: syz1 as /devices/virtual/input/input167 23:44:57 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x18000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 242.447631] input: syz1 as /devices/virtual/input/input168 23:44:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:57 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x700, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) syz_open_pts(r1, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10040, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 242.679860] input: syz1 as /devices/virtual/input/input169 [ 242.711137] input: syz1 as /devices/virtual/input/input170 23:44:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioprio_set$uid(0x3, r2, 0x80) sync_file_range(r1, 0xfffffffffffff001, 0xfff, 0x1) 23:44:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 23:44:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:58 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xb) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x28282) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x89, @rand_addr=0x1, 0x4e22, 0x0, 'wlc\x00', 0x13, 0x1f, 0x80}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e20, 0x2004, 0x7f, 0x0, 0x8e}}, 0x44) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x37, 0x400001) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 243.378395] input: syz1 as /devices/virtual/input/input171 23:44:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xa6, 0x200002) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @local}, &(0x7f0000000180)=0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@loopback, @local}, &(0x7f00000000c0)=0xc) 23:44:58 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x3000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 243.419528] input: syz1 as /devices/virtual/input/input172 23:44:58 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x10000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x8, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 23:44:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(r0, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x20000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x80, 0x9}, {0x1f, 0x80000000}, {0x1, 0x7}, {0x7, 0x7}, {0x10001, 0x5}, {0x5, 0x1000}]}) acct(&(0x7f0000000140)='./file0\x00') ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000400)={0x0, 0x80000000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"767d166785853700df370004bf6800"}) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001, 0xfffffffffffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000300)) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000340)=""/55) pread64(r1, &(0x7f0000000040)=""/39, 0x27, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x1, 0xa5}, {0xf427, 0x3}, 0xc86, 0x4, 0x923}) 23:44:59 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1400, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffff8, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 23:44:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8001, 0x4000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) r2 = semget$private(0x0, 0x1, 0x8) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/178) [ 244.243147] input: syz1 as /devices/virtual/input/input173 23:44:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x20000000000080) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$cgroup_int(r1, 0xfffffffffffffffe, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x2f4d}, 0x8) 23:44:59 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x10, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:59 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:44:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x9, 0x2, 0x5, "def0f44eab71aff0e99baaee95c5d6f61722af464d1a347d536d0aa2ac160e6a33909fe9509f0a7c87ebca51ed25ec27dcf640d04eece0f8161ea1c7ce5e87f6", "8799e9027e54831fa3330907c480ec3900f5893b51427521823b1416e1c050d9e1dc416adf3fc692a3a9d0ec0d03581980d4781d0c725aa30b8e008cf69430dd", "17dbf0aaa9a9af11e6aed153c52b89576faa9975a12bb41a7ffcc627e68cce4c", [0x4, 0x9]}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:44:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 23:44:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/136) 23:44:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 244.424713] input: syz1 as /devices/virtual/input/input175 23:44:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:44:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x34de5c3c679ed09d, 0x2, 0x1}}, 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:44:59 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x600, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 244.483876] input: syz1 as /devices/virtual/input/input176 23:45:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x27, 0x0) 23:45:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x101002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r3}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:00 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x6000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:45:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 23:45:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:00 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xffff8000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 245.231409] input: syz1 as /devices/virtual/input/input177 23:45:00 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_out(r0, 0xc25762f27d9d87a, &(0x7f0000000080)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000000000)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) fdatasync(r1) [ 245.281636] input: syz1 as /devices/virtual/input/input178 23:45:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xf, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:00 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:45:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60) 23:45:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000280)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/136) 23:45:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) 23:45:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rfkill\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000007c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x3a3, @mcast1, 0x6}], 0x2c) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x587ffffffffffffe, 0x200000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="647f20ce8d763918e0449a11333a95c2778c0d795a94c63d234c8bea514e6220718df97eb48d3934f612b68e9d8e0d28825fccc452f4b3b5725d010e7ec72ae4f43946d7ba0c4f7ad1129d3985a6eecae9f2295024e0d291d1595c67242e34dcc974a124653a6367607b8c526e8fe93e79fa7a19f5045480d7409ffe3c3a2ee917b3080f94a184600408971b084cc00014f81c43c5b92129883fc283f0ef9fe6", 0xa0, 0x0) keyctl$get_security(0x11, r2, &(0x7f0000000180)=""/235, 0xeb) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000cc0)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000840)="fb666b5a85b9020ec47e62f5ff27eb7fe6745804d1e21a45711c4dbc2dc1d13de0c2dc673189f5d515898bafb00586ede04c680e414558adf9e9987e88db6059e39aa4ca31a749c63ed7182ee6ecc4b33f9bedf521b163ab902112c2c33252daff7db342339c795a949c438a2a3bc5f30a6ad38a49ba128fbeed9963d15805a4dee70c74eae259c14747844f402fa7da58e50910", 0x94}, {&(0x7f0000001080)="a5486f5a7261292b95103569675aab78663b9c3c558c16899e8c093572f992c70309dbc118bf0f647425fb04fe4953ebc24d0ef54a3eb8fb1c7efb9a4fecd1c618d0ed4b2b47a5bd2b8120f38cfe93af25217a8e1096bdf72a8b65b2f96b7a69f014c69019b6c490fd658f3b9a79763bbce3e7abdc6108c2c5872de8dd14ece953639675c160d6bd4c6bf2e2ab1123ae12e1bfe74d96991c0cde7cdf9457f649e6f71f2206987f6851428bda23a7d69e1b2125ea76d621b8fce122463ca36df99c8d1bf45d6dec24ccc7b5e22dfbbf0ffbcf2eeec9d332899538fc916b11d09a92bb7e5cb8d893cae008a543f5fc4afb9c6f4b16fb8f03787f053d6c4ca9623d8fae2b2e8e8bb6399b8684a28ac69c03d9108e64b9e3e3332cad8d19c9c9684e70783c180b29f3c6dcd294404de1b8215c7da865f84a99dbd063be9fa57b53d400ddd785f223199e6921352da8d32fa5b88626d0edbe6fbca57f92aeadccd8f399c082142f842bc0e04e8fb227393d54186de241e7242c366e4b05c1cfea22673d8f4458c713abccbb6bc8dfb4a0bfea3a1dac5d616268bd2b5edb68a047daab1245d06af02c0ca559b6a2e68e5ae527c6a058d187286c883b8d45f4b46dc2dbf7d58b92a7294ab6b3634c7cccf5a57cbd1af011f385586b0a4120b9b30f150481181cea1b8aa57069571464c2f407a6af1b472d0cbd5f80aa2d71b3843b55f8f58608c99ed7f05c5b19aa079df3f3287c66c75a157b4f6978377479c43c294794fb235028eb35be32aa61d04d6643c3e30dbbc74346eee7d046a61e8907f448e049160c37504f3eb9b86f328a87d5141b486127c621caf3f74e2a452c0550d4ee27e0983217e905cddbe9fa0959443f2e35fdd7a0460ec94ce98401abb900415df32ffa00f688a05c694f030a23d5e5b54c848e967f0ec84bb60617cc8667d7ba2868d7a4071f933f4b52676734f7ffcc8dd3e000ae243630bf689c5209c3d63c8c3172884cb86aeecbc9df6d2ba87ebede8067f3b0eb0f3de14b2a90b8dff9e05390b272ca42a4d7fd23cccbd7be28e540ff6a81b5a7b24ee637a9bbb93dee9dcf3e4dc68c26b0c33607955b5bda70191a707e9fc08fed3d7e60e6ab0bec8fb6975b25c7019f1c312d19a174834b2517c2eaec245b75caf62e3bcce11e01d67f6269739fd610cfef758a9c1bd40390b82c5f129b3ac9ce43f724bbdcecc564c34776f0b27c5b667a7bf1b50bc8092ae57c8c9a7c154a16b25bf5b2c472a8b5b76a4d0801940cea9ce129d1e364db5dbe065927449ad158041b09f47f5ef7d6c38cd276b1af1e77e981e4afebfc2b205ee1f9569614c4c413d1faff34402790c04ea103652b6e0485bf728fd68f5edc441ecd1896b48326b5f48c98c99093e60e0336477a9f7ca77a06c000cb50a31a168cb1f214db876d03b366c413a682d06db6aaf0968d5b0168f1ccc603a1e1038ff6a1c6753215623e082bbc021d36d145a5ac18a8e97643508afa2cdc5188aaaaa6a94faa206daa5d51e7cdb18a87cc3d33ad0677caccdf220b93fec0e9c4b1f2c68f7631ff57bbfd61290fd771ccf817c1f5fee98c9625e8edfec2afcf1541cb8aa18b6b02e6d39eeef5b5f135109d2508cdb486b1d37cc1132b421907358cc27332904fef7bdc314200b3d9d7adbca6d513907894d88b10744d937b5573131f25b398987ca315c613c710b43bd019483f7a2b6d801992a0fdcb0359797f55c5be26424973f5bbee09c11e49d6d0bbcf7419ce0e1e55df9004f797bc9f7548329291cdc78967c85e811d8d8733275d427f6456f9336fc7b8551acdf80ba64e5d4196aa9fbbc38bc1d18d1ed0c7771e8fc06829122e9d042e07e899e7ab9cf5afc60ca0c893f8b4249cb58be5bb4a68fd3a591b19ecc444a7811eb3a46fb26d0d3d9d2ebc1e7c1ac559b44eb8fdd762803014550258b01bf204f6856bb1e1e613874095be7879d4a348d4aacd9c5fcbd927af698d0a1f1701b8906a383d5b276010f5f210fb7ccaabfddf0d611adeb4ee2ce7d26760bf6b52bcde1c87dd6865e806e7aecb41621c8235302a8041ba365b95156615f4e21e91b7c8d3d9bd65b696d4d9f640b797cbed95af8f76022e37c013c627d7555e919d17daa48225348fc2289c5d69e07759fa9af876f5b47639d50509437de501504a42300889b253853f3bd5fa6abef88298b2554f0e209b669dff44fbd60ec0494b336163ad2ea3bb3c5dd8ffde955552f8bba0b2297b91aaf8e60e863f453b73bae59d81db88d561f5af2c6df6a15ac8f70d46325926402024b72e34bc171fe50c911fb8ef9a01665821f78a8818baee241dc0f8a2a283278bc0a0e87e35bbca5e9e75b0fb5546097282765a89fab57d69e88541f4c00a995b0e166cbcdcda9ed53efc9ff625cbd07a7da218d1bf1bbccd7bccb68d54d57f26de05d03a61674b0a81f7dffa958385c0fc218069fbc7800c866cba09e95b8bbe638960a8143458de19d8c897ab8ef1aaf2a41517533290d49dcbb47b30e2da64d5b914f1416b88ce482d74cb69c8955e899da2bf20fbc7641152e5435acc9bc5b967437b8350987f64b6afc88d756124c3428e6fcbcaae520c51aa3a7eea7330552be71d3475e657ef525d519fc4c43d8ab3d510a60e99f5d87324b403e617e05a0526a16668121e12db3f3dff749d61ba62cdf080a3e0b699b0f07f66b89026c04a09b8261ce8f60cb6a8a43f9732ee9760687b77e9e06714295a6b46be4444cb9e8f474e3e5cfe889c29b1a72e17d6f93cd28b38f7a0f88a8cb59dcd884b018ed3a57081da0dc1c30137686e3be9076673c449b4360a93de2bc47c59615cac7066af8b8913c9389cf1a5f76511bb9bb4569a5b25dfe056be2639e375607c1d91c40c75d7be854cb2b95291e396cbe14c848456545eedbdfe72aeb6869f232b73f0b296a13e8c7e2de42ba3a91063709eb0a8fb124f3e2e2ff32cb2f7c43574ebeb19e4cd5d67c52db0d4d06e0dac9bccb394c7958e6f8050664811c8d899c946cd30bb11f758db25e0fcd707892553b6556fe599e800c57461e95fd866129da6b638dbb0c9ee1317fd5d1e2322f4edffbf299f0e7914a396bee02436e99019fc1ea0aeb7eba4c5049505e241a7b4f371399530a116366a45baf550f2c752ce042ef8eaab1d033118427b4f9e34e06cf8195cbd2b70ff2b82bca4daeb96c6aaa74ff2f9047f95a9088f271ac363d3df22cbefa940067db2bddee56601fe6dc9b220127636c4b41e525e1d5fae46dafac0aa96cb91948b01196946a76763bca9e71cbfe6be9f686eb4dd6c43390b60204cf359ae5e224b13ebe7ee15fe35cfc7fafe58bd306a2e5706f88bd840e86f281900036c175d310590e22c04b249718255e1a5d6331d5cb7aec532b1d95d362367e98c51b7d95b692e0b2456a4a34edfbbfad0f3363268647c232977d5398ad6df352503a65e1cfa65c238dc0896524a19e6dd5d14f4d004f6f31080e8fa261bccd22e46bc50e07c38284909c959880ef998dafb98b435484584f8f4c58f290d30d21e798d8bd49de208c2e2072f5aa1b702d183da13660be12a60e3721e845e0b10cb69e3e4e6a9d263fa6dd907a89f7db1123ee89d05054ee7908d9418d5660685ac4b6dd6bc3fab07fbebe7f94769ce661b18a69f554f0251d1b5e2516a231cab66731cc833469a7959c6a595b8d186fc7ee3c1275ae80491df5327bad1831d945a7d9c10c1ec7e3fdb0038bd0601ed2576db2b9caae4bee3730f9a7d2bbd06d937fa3421da5a2a5c7bb850fc88aa13197f2e8f4458884e5aaece670714ed8f63f6e24374619858a9d5203c0bae75c1f819f2610d244aab3992a6e9b5321efeaeae72ec8474206b3e05d85882c46de8fd8e403d142c065d35ff5192efac3f64697d74e49979a9aa2fe4d05bd72dd0c369aece427b9feb9a3f27e505fb1c5961e1a1dffcefb7fccac24e96cc0237807dabbe825588aaea3ed8463c158efb19d913e2b4541e074ac043388255e7e7da94ff6f57687008d58127579a1fc8663f822b244688a6cad70ba62bbd4ba9fb11720ea46af2b1713cd5c1941d2a7874db9c76a5bee93fda18c7eaf7e052948383a42f0b9041502e144b9c9f8a4713b8c7ab83f1086fb79dc34d058bda73572712dac5c0f5999c908f3897a0b4c4b11dd59d6dc7de50db5744703d6fac0336ce0febe820264d72cc6790e3811609ab33c876c56531509212b42cd73e45f05a3787ffa385e18f483c23e59ef0de358fa52b56754e4519997e5a11818ca3f4e1ce683a345db3a74cfdf6cdd3a6b90ae5ad0c05e96d542c5f7605add21b2f7b574636403e3fb6d4ccf4adf0da423791f31e0453abf27bd23604e31388e10f959d9df4b1b30e7a688a674dcfb838fd127ef418acb378fde33c0deade43095ec979691d4154aefe5aefb1ac026b899ddcd00706213d78884fd95b449fd02e6e24d318f28dafb48e5bee44280057778cf927fb8a09517a7867fe90da1c478786838f7d862dc69c98a7c506a0141fba6d2cdd7b43bd4039dcbecde32a08925e454a7d82a3d11c508906aac35cd54f909766d4baeba44665bc360e5f4aa76ce4bad410ac20eeeda090cdfb77d198a0e7d9c31b183d61379db9036aa2667f615741dbbe39b944d6a3de897222ccb4bf50f3ab09ce5ecc3016a02808e5569fa3f4e2c4b95b6f051fdcce6150a9213e3f7905e4ae7644e4eeb12b3b49ed5fecf5b39ab955600602e1ec2f8ffe3d611813d974fe42dd015e2f28f213e233117cb38993d53f4eb8815b81bb798228a82a05290e5ae6d3caffe334abed12ec7c6e510256a0135184b2e0c0ce10fac3991de50c43fc20ecf1056f6309ac6339056c38dacd73e002908978a8e3e970d3110173e1a64eeace00b2510d243e729d11463fdd061727efee5262ab2c8e3009b9eb9daf88bdbf581f1a77db3ac8e0c38a47cc30e22bea585f1bafd7a70d6522aae646f62bcd8cd758a4e0f510486bbec4d6237b5a30ea2df303212d375693f9dafd1f151bf2f893d7270cb4f4b9e1b69209246c532a7918ba46ec566312f470763920b9fd8df881d2346b502c617405d5f97d8569601b3575e869d04073776cd2fedcd4e92a5f80b77c502706c90d594fe3a5b7ce55cdaa1735bbe2d03f11d800e5236c9379824c54a1efafae1aef87d57a4634a566a01c13093e9a0877e1c0dc57b089934abe18a430a45b920415ddd722fff4a2e19a159ea514e9cb9314b008bda536ec4b68f9af4302768b20f65ab1550bd1ab20b808105461506814f01ea07dd0ddb9d61f2e112ccaeafb05e975a8891a0bd35cd6b2e5cece0536280d08c3e2bf58290a277461b096273fa69d3f3ff16ecc7aba4a12051e40789dd54e0bd3e49191a738ac2eea343cfeec043abe026c5b646098759c65f37795ba9e7d3e8be29abbd228e565bc00aca98d72713e17e21dda8d0d3a196fc0d5fb1d28d8459e75e0564984785997ad8623d3ab16ddeb33551dafa76419c58d202fb078ebda0e0f339862d7232b76474b5b0ad9246777a3d905314dd5f252737ebd11ffc311c615f34b1953dce50102ba69d5516541acd20a4b43e9aac41a861dd3eb914277f6eafb73f3e4be9b73cece07fdadc6252dbc47390b2c9a207a0ac5bdef0e489f85b67f1a2b92f48207f4890c3d7a006c8df280267dcd28a4e0f1ec99fbf5c983928d965d08f449c7b75431d7b29a621275fbbc8ccc0a0cb7feda587910af79af41b2d3151b65894bc5562c65b70f73605113c198a9ce279a", 0x1000}, {&(0x7f0000000900)="698d1d0ef3a99f1be4221ff194b6dcceb15e9a62088558127de7bd8045816bd854b7f2941c255dd949a819e592bd4fb6e54488e69c1cc2f03b8733b26c5cb8dbbd7a67a4f1da0a497110a83b3b40d24114e9922e7de4337b87c3dcefdd72639eaf6eff499aa0985dd79329cfa827bdc3aa1e8505990a449b5dab358952ce6ad2fbdd4dbd383f89a6f376a26a62416bad239df9eb915a9ba1c9c8c08fd6d02eb19f460e86c70b5029dbb28e79efc26aba74d8de961e19cbeb2480ccae078c458f91831f3adcc43d7b13703be5ccd4844d7f9d10d3a0a59182383fa209e76dcc", 0xdf}, {&(0x7f0000000a00)="c64b6bd01a32a9d83403bbfb0050e49a07092b054c847e35d36d9aa026a69479a82e13de22f07a6fc8fc38c74b37db6e7692b67dc4abef40f8d1d66285e205da6ba325ea44b13c870e31e1f5179317fa5532d40d942a5404f32ceab1fec854bb9294ba81ad54977333619d", 0x6b}, {&(0x7f0000000a80)="c7c2b425a65e366fa9098544a02eb768fcb366d0b9607eee4eafa941acde1f0c2b21e03e617dbe73eae5ce423f68fcb9e1d2f6cba40feb9be4e1248f2000548da6a6f32aa96c95a7569bdabb2fef619a5e9c88d3f9a08e3403a0ecec051d1c8abc786b75fe6ae4565a288881cc624027cb749cef5d330d1705775cb2b00946ae64e3e961e7afce89befd1b000052f2573811e087c98aa005751dfd3e7cb63bd33baa31ec782717533dd573557ec6c1be3ff2e3a68ee184", 0xb7}, {&(0x7f0000000b40)}], 0x6, &(0x7f0000000d00)=[@authinfo={0x18, 0x84, 0x6, {0xfffffffffffffe00}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0x1, 0xfffffffffffffffc, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x58, 0x20000040}, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000002080)=""/4096, &(0x7f0000000b40)=0x1000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x6, 0x7, 0x100000000, '\x00', 0x3000000000000000}, 0x0, [0x400, 0x43, 0x39, 0xffffffff7fffffff, 0x10001, 0xf0, 0x6, 0x1, 0x571, 0xb7, 0xffffffff80000000, 0x8, 0x7fff, 0x3, 0xfffffffffffffffa, 0x5, 0xa92, 0x5, 0x9, 0xfff, 0x27f, 0xffff, 0x5, 0xffffffff, 0x1, 0x81a, 0x800, 0x0, 0x0, 0x8, 0x2ac, 0xfffffffffffffffb, 0x3, 0x8, 0xff, 0xb3, 0x100000001, 0x7, 0x6422fdba, 0x10000, 0x7, 0x5, 0x0, 0x7ff, 0x5, 0x1, 0x401, 0x8, 0x4, 0xc, 0x4df9a792, 0x0, 0x7, 0x7, 0x2, 0x100000000, 0x6, 0x211, 0x6, 0xe6c8, 0x2, 0xa0, 0x7, 0x1, 0x8, 0x4, 0x9, 0xa58c, 0x6, 0x9, 0xcae, 0x8000, 0x4e3, 0x7f5832e3, 0x101, 0x2, 0x5, 0x8, 0xf65, 0x6e2, 0x9, 0x23e5, 0x7fff, 0xffffffffffffbfe3, 0x6, 0x7, 0xfffffffffffffffb, 0x5, 0x1, 0x6, 0x1, 0x8, 0x4580, 0x0, 0x1000, 0xffffffff80000000, 0xffff, 0x8, 0xffff, 0x4b5, 0x5, 0x5d29, 0xad, 0x0, 0xed, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0xfffffffffffffff8, 0xff, 0x7c, 0x80000000, 0x9, 0x100000000, 0x1a19, 0x0, 0x1ff, 0x6000000000000000, 0x8, 0x200, 0x7, 0x7835, 0x7, 0x3, 0xffffffff, 0xffffffffffff831d, 0x8], {0x0, 0x989680}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) 23:45:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2000000000000000], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:01 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x4}, 0x2c) 23:45:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4081, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='\x00', r1}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:01 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x10, 0x99c, 0x0, 0x4}, 0x2c) [ 246.131047] input: syz1 as /devices/virtual/input/input179 [ 246.165549] input: syz1 as /devices/virtual/input/input180 23:45:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="418bb1a121a17055c20061677d416c0016f531fc71e2652b6acd36acd30fab67da1a4a31f9f7c950f306cc4f6217e88035971e8901c05acda8e67bc031e2ba1dbbb6044956d9f98172b9a92e63416077328244a4d89fb7c64c6157ed712d556a91c85beaa74f335350a8b24a4fc2300c322baccf9f0abf0a60df1a2727de18e772de289243d108bebdb5c562d3952d215b71bb77872493f26a5b8a9bd17d805f0243323a3a599ac3ae83e53d11e4daabcd6e194f8a0af8eaab0b0e31b412ff57739e90fe741595bb989b567931308590a2d5bc34f1433b235f103d43", 0xdc}], 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:01 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0xffe0, 0x99c, 0x0, 0x4}, 0x2c) 23:45:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000) [ 246.269193] sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT 23:45:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) socketpair(0x7, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) gettid() 23:45:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0xe0, 0x99c, 0x0, 0x4}, 0x2c) 23:45:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x800000000, 0x2400) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x800, 0xd58, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000180)="653005a783406fd5a92eb633b8b04462cc6e6240bc3c695f956a276929a63cfa4763cf678790261c07c91683ef4b250f535e818e26ba7109709cb6074acc82583d4e4930512c064c313ffe4912552ca9b59ccb38b5a64ee44b24fd11ddf4a280b1535b006b41f517ab6dcc326b4f94e21dc311eba13064994c23f6f063d7d7ce84e44258dcb8fe36255b1bb089d587a6640338bd56b5290b583ef5421d30c4") r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x40}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x7}, &(0x7f0000000100)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffff7f00000000) 23:45:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x3, 0x99c, 0x0, 0x4}, 0x2c) 23:45:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:02 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:auditd_etc_t:s0\x00', 0x22, 0x1) pipe(&(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x200000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x40405515, &(0x7f0000001000)) [ 247.071086] input: syz1 as /devices/virtual/input/input181 23:45:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 23:45:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:02 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0xffffffffffffffe0, 0x99c, 0x0, 0x4}, 0x2c) [ 247.217549] input: syz1 as /devices/virtual/input/input182 23:45:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1001}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x502, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 23:45:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0xffffffe0, 0x99c, 0x0, 0x4}, 0x2c) 23:45:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfee00) 23:45:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) set_thread_area(&(0x7f0000000080)={0x3, 0x100000, 0x400, 0x100000000, 0x1, 0x1, 0xddb4, 0x9d, 0x9, 0xd70a}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup2(r0, r0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000180)) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x4}, 0x4) 23:45:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x40, 0x9, 0x0, 0x0, [{r0}, {r0, 0x0, 0x6}, {r0, 0x0, 0x100000000}, {r0, 0x0, 0x4}, {r0, 0x0, 0xfffffffffffffffb}, {r0, 0x0, 0xfff}, {r0, 0x0, 0x5}, {r0, 0x0, 0x8}, {r0, 0x0, 0x3f}]}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) socketpair(0xa, 0x4, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) write$apparmor_current(r2, &(0x7f0000000200)=@hat={'changehat ', 0x2, 0x5e, ['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '+nodev\x00', '-\x00', '/dev/snd/controlC#\x00', '%bdev\x00']}, 0x78) 23:45:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x26, 0x4}, 0x2c) [ 247.927257] input: syz1 as /devices/virtual/input/input183 [ 247.966399] input: syz1 as /devices/virtual/input/input184 23:45:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x14, 0x4}, 0x2c) 23:45:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17) 23:45:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r1 = dup(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000180)=""/161, 0xa1}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000007c0)=""/190, 0xbe}, {&(0x7f0000000880)=""/1, 0x1}, {&(0x7f00000008c0)=""/134, 0x86}], 0x7, &(0x7f0000000a00)=""/157, 0x9d, 0x8a}, 0x4}, {{&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000000bc0)=""/25, 0x19}, {&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/162, 0xa2}], 0x4, &(0x7f0000000d80)=""/74, 0x4a, 0x74bc}, 0x259}, {{&(0x7f0000000e00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x5}, 0x28}, {{0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=""/199, 0xc7, 0x10000000000000}, 0xec6}], 0x4, 0x20, &(0x7f0000001100)) sendmsg$nl_route_sched(r1, &(0x7f0000002580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="ec0400000000e18e174200022cbd701398cfc37fd8a1fa8e", @ANYRES32=r2, @ANYBLOB="0e0000000000ffff00000f0008000b001f00000008000b000008000008000b000500000008000500ff0000000c0001006367726f75700000081302003410010030101e00000008000100696665001c0002000c000300aaaaaaaaaaaa00000c000300aaaaaaaaaabb00000410060004f7fcc52eb944119e7a5b8356cd84fea6b2a8a7e9e58c9d5b2775270dbcc16542c1d45242e5c1ebf46e17982b6d23c0bc39d7b5aefbec14aba71f880915a6f14ce3ae0668ddd28f2f7cf311b8f853b83e4a8b5cf8fad3bb81f8303d8b98bbf8b473949229426bffe77f193c5970fc7f48881d4809e452ef96c90f2bdba0eded4e3ce8a8a58f8d27bf11fed2799e843ff405550ecd687594564e8b711430107a95577c020cc23f4f8f317e308cb51621fde44778e8f3513a5cf4d4b6ba2b0b2372dab8fb82a9e196e2fe82b16e11fa2666b94967f8d24dc703d3cb898312bcd44c20a7a8538d87e6ccc8853d0196dcbc6ee3ff7a8ab04cb12e9e4ec21c36bdbb5f722fb0a8e401f0f9a1d43804cc18a2e4ed68edf74063e4597961ca31873ed1b6658916ca101fcf23812fc7834f68d4797a80166025d489512abe030b42b00cad02f579aa012e08d57df874eccb2cb7a295461cff991f3e3727df24419a190f749ee1f6e1add9577e449b3f375ef74320df69a56433bb398b766af02753616ce8e9cff547ae08237c44ad4be96601568f828d9c442cd0fa492c754d26a9f41ae12dd29fcc25b915ca14b7ab7222a497119939197a6e061e69ac00df5bafcc340bde81ad8588c0692f803bfb70d4459f7bdcf75a0d6a982b3062990f7ffcc180de28de5126f21522c838af7f2c89527800f100a45df60a8ab0e8408d69c9510ded7936a23bbab24a4c512b8717df804a1f34eee25ec3e92cb43b092daa98d1337e77ef76b9402efe2f49fef84bc56880723351ebdb5de2f3874ad3eb33608ddc0d753f0ea33cc388478e70b837bae6265d29ade2c2305b73129c79b505e2fa30ae9f5b74d644abbdb993ab35f2c699bfc21d46cbdc6d4b357ff46ca9fbf8c33905f432ab8b261eafa7a20f955d4a131da5c09f7ef134c2b4ca9bccb76090584d3a3d89f67916bb00773c3d2e46796232646c89ca999fe03a0efb5242442e1a590aa52c625be66dee9e82e95a4f572e14bc29278a92d77856333fac179c5ec294db63849dea9b91583d2e3512ad043bb5853436abb99b866b7153a9c3b03d04e7d07cf30c679c469abb2e19cd437fea4ef134f11e958cf40f3e2108e6b22303f325d82f718b4059cc2a36ec773fa4bf38ecc8dfe748060732d1fbd3810a0899b4a11adca4786343aebc0c87d4810f1cfcbf0defc9bef0edf12696518deef47646988cd956c7c3205514e7d47d811d84df1e168c52b5392904371b5eddbd319850254c3310dbfc3c6fb7aebbeff864cc3db4850b93d060af70d965a61bd80d56c11f9b39497f1f3c9831c30fb9838d47fbe3815a888f9955f32857617fc95f89d7d146636a7873f65f7fa93a89a13b713a38744b9196171ff964097310aeb0c316fe8c1e6e399afbf49ae18a957e9db5511768ffc9c9ba96db85b37c5bbca21e1de357d302d072b1508028ff1ce554d415810a966e7b6dbbaf47bc0d757c0fb3f62d72e277a755f624907a1d78baf8c27ecf1d333ddb246c892ec4456c7301249e60cb1905d95d29d06a817aff0b5c819aa6a1be399b83edf397fd9af09ed31d0976f6af2a84713a3a43521d696c6e3f967a876f3819b0f0d4901d147e16535103560d8c4693e438584e3513a9a326b20a8376370f6dbeefc4b98a9aee4f8640dab2f394aecf94e8f7ff4a1eddd6bf34b4ebcd7dfb7adb924f34ab78159b7ebef69a3ef530cd3b570e86d48c5445621f4cf4171140d8c4a87653eb5335816475762f6b1fd6b7b4c6c79c749fd15ac2ce69d79e0a0fa3fb4fc58f6798eb26d7ebef8fa05e79e085bb0d17c2e1c3d51ed483896c226da1b1adbf4bd26b434a00addfbaad6cf154e95b5a3230175dccab24701f54fd754f1fac29633c91b9d67c8c9ee154ba1dd86d7daab863d6f370afb6aad29776d2a05fc99a2413442a3d0f44521799ae26d6e11ea921b1cade6f89220e3e681445b77980785c4b38cf8d6f62656ea9f8fa78737c1a0b7d955423d68b3ecb35f5d54d9b16095421b71db23cdb54245f1baf72b16cacd1405f1cfe6c83ffe8a2bd529fbc860e8e50d70cd24c05cd40c42444bf9b30a6360929fa33205ddc0c2791ab6af63f8e29e4b14a85ddb245982828ed3c153360250edb4b994ea229fc3afef0366725a02d428f77dfb184ed0410e78a2edf9480889f201c796dd2ce70ea29ee123578e3647942aa235ef5a5c9edd79be098102c68855b0d7fbc3ae653053e020974e2c063a541c50d90c223fd3dc336104a14460aeed110568bcea307e11e83d86f48025d35be92968ecc9902a599474551b049c3232f2a7f1125c65cad082a93919165652f2647ee237f4f8121dfbc9aad9e10f379c4f3c850ee3182a1e6d31ee4fcaade51e909554874ec09e43bce33766b808acf21c27a33d781f5e398b63360a503a96b31fdef1b76f9f698cc41c3d9f7c960abba447b12e27f54affd3df5af70c1c44b88404d8423b4e9996d258fa24f8dc33d8e547137e836bcd03796ab2cd9edeabffd2bd2d929541d91e9ce841e5f24eb4b1f653613656fbb820b6266c12fc92c01b4bc9a37636d0d661af6296944ffb8f1cd870d42aaeabdda2daf5f890f6417bbbbdd72f433695273dcf5b7cf3b7f3402779c88dbf999c1084d66325f10a4aea3daf8e7417b5e44665afe08937d60c53ff894b16a11560624133bf9f211fb1c2e67792a2df0df73c89f5d13efebc4967c8cf2f213949ea47e962fdb46d7024d84339b6f55eed0863cbebf409c8eb50eb54559b80bf246837fb7db2efc108f94cff95ed2bf85ee1ba4096e985109c7b57349a186112ab5610add83ba44525314997b47b3dd7751284caa76b171ca7b3e599fab16d9c2efe9de6fbbc0a5aca3af7a5a41914c8b0d95d77faa4717d8aa2d4adbfb9755d911f6dae3888b0a2ded75c257f1b23ce1a634dfc7cafd966865d255fce7ddf81370949e1184ec69f86ee46a3c5365bf884312e5c76ac493e93472f207542c141d2fa45164125ddc7068c1c47a564d0cc9fea9a9927c45c6df9943cebf5465b910ec486d556d348177e2d907ea1bf2a610db44ddc0f3d4091f7a80783be636641344e5b1cba8d2f6b04f69d7429a83b53691db67b4a67af08de2f01f9489273ef8f6b1a4c0972e899eeceacd48dbe885a5f4ec1dc7fc2dde46d4b3c3f97970f785e19b23cf9d0029b66ff6dbbb38c50561abd641c67831585545ccd98c4397a10ff9f20f20c95bad1ca9cc2762f4f38bc5cbd324ada2322c263772d13dd57468cd81f02e8eb30aec1b81165f47cb170d4fcfa9c31ba76282d48e982f06d20495bb3556311dbc7a6d572cb05a954a6c01acfd0a02c4a0273bf6bbab73bfae8b4ef645134a7b72969e80d4f3701dd92e55693bc08d1fe831bc015bb3e12ab169b37b8581b50bf83d748f0c9af78b5a8bc9261d5362637ed779802fd3a78ff75e9d90cdb5718d207ce36d36363c55adda69ce65b7c1a783780d75e552e073ca767d4ef89929cde7058a943b85cb177ccba29c3d5c0ca3c82aace9632be261f945fadbac190058c0ef3fda62021a3d24a661d7f8aa3a81e28deced4deb82ceae4b59a4052a6d70a2be085aa2ca0074fb9885729535b1cf6165ea632a5e11801b00e5d2484b8a00dc9f42bcba066c2f0f94fa56e926fa9d260414b4d0f56000cedd41c2b1da8747d6ecb4d5e8271476bab07be6e48201a7ce2d44e995865005ac232ff096dc79be8546d3dfa63605b450fa175b8b1c93f4c28a6e49ae1ecf6bb52f08676015a416abf35eaa761e0bd3dded4b59af644880098fa5da626197df68529f39bbbc64e750e8cfe7649910faf4b7e6e0a3b27ddb52b46617e0293d9082c2f89873b61bd30460e87637aacc37c1d63f7bf8a22ca513ade523d70a45207c35db8fe4aab179d74aa28ec36a15fe54a056d51f89d9f32dca0eb95bda3e017388b9a5bca976e253d93d3b57242e1d516381eb806ddf14ea934cea4bc15f899b39917b233af649fdea03d64df7a7ed68a0a5d9bf6513872ebae5176f7d00e5a00719dcf20df6989e50bb83aaacb098c5d43eec99f2a1ff782f41faa2c1b3570d5cbf74d9f3a3ca027c4aedb5bde944f938e8fac3bb8a1cf0b16c0a527773da29b9c8994bbaab46ffafa6f0600d659b82c27fd71123314b782dc8ec43a525ded772a881b0e18104fa76e6d28bbdf7e14b69fe9d44be80050e8cdf8a92d758be8542ad2bf4ed2df072f0343a0b514717bfd72b335900d60405c161442a18d47ea17451c4fdaeae24e2883df2becf959fab455cf9e2470d305051cad1626bf90d5cf131238a9117f970113845ef9730ecdcdc571f5c7d50fa5b614e238e3898f893ceb27a85a93bc61a7527877017d8db553ed6ced82fddbf73a9d467023059a033637c52f3bfbed3776d9548198abb248b01de12862d8ed9258a3e086f2d7a5fe31f784416066344bd8089e4c4a236aff093ce55aa8bc20430eddf754bc73d0544de0a31464ebc66bb336d2611bea7836f2310b2bf4657d24b136377e5c10e3478c48530b2986b08382d03b014571bdf8e52598d03b18950323e5f7c59dbc3a4047a599479bd7c054be26b85c1988ca9b99d9e394887e1f07ae03ae358dbbcfd47c73e8b49fe1781f8636bd86335ebb16becce0129452eb7b488639f5456aefef14b7f18b6472f5e181f382f6b7266eec443d2d4d6086d69add729196f2c27b2aed475cad67850555a44d785cd5a6f59ced34aab1cb24e4f73ff99ff92b537551031ceba788aa9b409153897d2172ead4089389cdcccb3ec9d8527f023588c2ead45a69abcfd0fe2b263c6962d9d4accc2650bf9b1f51a4ed70a6bd5a6232cd1e9810ef28fa0d4c0ef33c32c6cf2b4a6a5eab8c99659d6ea21a14adda412a4478b88ff02bfb6def52206960e239659d309b7b01e235397e3377927a672c8ae293c4ec73280a77c8bcc7c2c153a421fbcdced751d5003da6cb7b8edbdfc3573b5628236e9f3f4cde0a021d19af1be763fc0c69f50af7a4a8fafc050ae7d8813c324146d7fe2ab4a292e9b5aee5c4b37fa67f0e8c4d6374c3deaf7aacb06c431eb31726fc6c104f8df59e211346ab644e68ada07cfcbad7c5616bc88029ea1d910ce20984859cad731d8b1f258ce2855e39b6d2bb00286baf906d3e79a03cb258b9e72adc22ef3c624fdd5cb16875345680b056403180df76b43018654cfc595dd9b75e091a2edbb34c4fe91dbec7ffe820fbf50e7216c5f486ac39bc55cc593e70a223cab89552d4d58b6ea64685f362f49699b862f4e8f0380610f053b9ef63df382fbc72586975564c15eeb49a9779fbc0aa371be43abac78abf178dd7847649ae71ebc6c0c6a95a025defe7ca3b9e3d87334f6304bc619f40498b75bfff2ef0345f651e81a8282bcb37165059968a2157da171306bfb7c688e18b3ca20f03c75c1856282533d9720557d6c64926eeb88cfabb84ea2f573c094c5691027b48baec96650cee22e74b98294eb378a5344fd9c22c18d88828bb93b5046ae7d26472e1b85e1f731e4d3193e03530c69baeace714684cb9b5c74fb26ef3a43af06f43c81cf3b7b696252af1b8754af3e1f64b1e620fc43f03c2f345dfd249124d50fb3dd7ac971ca21685da25b6ddd8b73d47142be18783c41cbd37fa60dbcf48ee475f00457843f30416746f83da2866ab8a3fe7badbd40d56e5fcf96050e757a6120cafc331292049ae03cd85e6a911fed4f53b1b51542f68c37ea03821020eb446cd875f3ac0e40e91f8a12bc4eb5d3fca6b46419a50000e8000100e4001a0000001000010074756e6e656c5f6b65790000180002001400060000000000000000000000000000000000b4000600f7c8f994a452f6eadccd29eadfd5655cc0f4500d1379a1d848d16dbfb99fad1c839594912eb628866674514d1915cb1872de350a3112744b4d78596a1c046cd7b1b126132aad92e6788e3716df5c18446fcfcbc40a0a183e55ec5c3e380788c37bb6560c5b59f1879690ce44509be8f8bf790e371d25f6884fed85492e79c71a2114e026b6cc4ce607707cdf8e7c502cc4273c453c5e39021611461e05ed0c3e613ea09e962e60025d99e9daf30000000000e8010100e4011a0000000800010069666500e40002001c000100c41100000600000008000010c11900006d000000000000001c000100ff000000030000000400000000080000800000001f0000001c00060008000300ff0000000800050005e2000008000100ffffff7f3400060004000300080003001ac200000400050004000500080005000200000008000500010000000800010007000000040001002400060008000300ffff0000080001003f000000080003000300000008000300008000000c0004005935951e7e1700000c0004000180c200000e00001c00010002000000040000000200000001000000ba00000001000000f0000600e5838ca2d08868b25c648fd9d9dd66f6991ab9156f86c6cd5a8fca424a06229c15ec4d80d20ed7a9a9f76b163da7591cab689b3a23e9c1da3811b9e8dfc097d3ea6bcfa478774c0e64cfe92e0b60702bc624b35ee3e5727d7907436c32d5c5fc96c5f94f39ca76ab35321160dd1807067449acc76100695e3aad4c4a7713e92b9dca66febc8ed85c294b1db11cb0089f27faba9661f82b5d5502ace9963f89171c1f1e6243812e089712eb8a9deb6d80dd40a51df3fa672f4eaee390bddeaa504cd82f92debd704a2c9c38c1d246e558979d75a7a4a32d12cbcd78d39ff2e7196491724b6137f0f6a2832cb500000800050000ff000008000100667700004c0002000800050008000000400002003c00010005000000000000000300000007000000bb04000005010300090007000700000009023b9c0700090001000000f7ffffff02000000000000000c0001007463696e64657800240002000800040001000000080001000a87000008000200ff0f00000800040001000000080005009d000000"], 0x13ec}, 0x1, 0x0, 0x0, 0xc000}, 0x20004881) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xb0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 248.162615] input: syz1 as /devices/virtual/input/input185 [ 248.206626] input: syz1 as /devices/virtual/input/input186 23:45:03 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x8, 0x4}, 0x2c) 23:45:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x100000) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe00000000) 23:45:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"76657400de00000000000000bd680010", 0xd021}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x4d4, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x9}}, 0x10) 23:45:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x3a2, 0x2, 0x401, 0x80000001, r2}, 0x10) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 248.853468] input: syz1 as /devices/virtual/input/input187 23:45:04 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xa, 0x4}, 0x2c) 23:45:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200000000, 0x2002) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 248.910190] input: syz1 as /devices/virtual/input/input188 23:45:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffc) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4100, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x2a, 0x3, 0x0, {0x2, 0x9, 0x0, 'net/stat\x00'}}, 0x2a) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') write$P9_RREADDIR(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x103) 23:45:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 23:45:04 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x800, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000140)={0x0, 0x2, 0x7, &(0x7f0000000100)=0xa3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x101000) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x12) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:45:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fffffff, 0x2) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:04 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x800000000000000, 0x4}, 0x2c) 23:45:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 249.095594] input: syz1 as /devices/virtual/input/input189 23:45:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 249.144979] input: syz1 as /devices/virtual/input/input190 23:45:04 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1200, 0x4}, 0x2c) 23:45:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0xfffffffffffffa39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 249.264220] input: syz1 as /devices/virtual/input/input191 23:45:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x43732e5398414f1a}) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x6) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x412000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x9500, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1300, 0x4}, 0x2c) 23:45:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x5, 0x71, 0x43}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x410000, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x547, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 23:45:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xb900, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x12, 0x4}, 0x2c) [ 249.875379] input: syz1 as /devices/virtual/input/input193 [ 249.908958] input: syz1 as /devices/virtual/input/input194 23:45:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x10001, 0x111840) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7700, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x40) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x1f, 0x1, 0xfffffffeffffffff}, 0xf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@link_local]}) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100000001, 0xa00) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:05 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x29, 0x400) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = semget(0x1, 0x1, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000280)={0x1, &(0x7f0000000140)=""/107, &(0x7f0000000240)=[{0x1f, 0x7e, 0x2, &(0x7f00000001c0)=""/126}]}) semctl$IPC_RMID(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) getpeername(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) 23:45:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x6000000, 0x4}, 0x2c) [ 250.077679] input: syz1 as /devices/virtual/input/input195 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x4601, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 23:45:05 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x29, 0x400) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = semget(0x1, 0x1, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000280)={0x1, &(0x7f0000000140)=""/107, &(0x7f0000000240)=[{0x1f, 0x7e, 0x2, &(0x7f00000001c0)=""/126}]}) semctl$IPC_RMID(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x40405515, &(0x7f0000001000)) getpeername(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) [ 250.139091] input: syz1 as /devices/virtual/input/input196 23:45:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x10, 0x4}, 0x2c) 23:45:05 executing program 0 (fault-call:3 fault-nth:0): clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xd100, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:05 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xf, 0x4}, 0x2c) 23:45:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:45:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xdb00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 250.396164] FAULT_INJECTION: forcing a failure. [ 250.396164] name failslab, interval 1, probability 0, space 0, times 0 [ 250.415632] CPU: 1 PID: 11189 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 250.423145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.432513] Call Trace: [ 250.435125] dump_stack+0x1c4/0x2b4 [ 250.438770] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.443970] should_fail.cold.4+0xa/0x17 [ 250.448030] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.453126] ? perf_trace_lock+0x7a0/0x7a0 [ 250.457349] ? mark_held_locks+0x130/0x130 [ 250.461576] ? debug_smp_processor_id+0x1c/0x20 [ 250.466233] ? perf_trace_lock_acquire+0x15b/0x800 [ 250.471158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.476693] ? check_preemption_disabled+0x48/0x200 [ 250.481705] ? dput.part.26+0x241/0x790 [ 250.485679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.491211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.496738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.502263] ? refcount_sub_and_test_checked+0x203/0x310 [ 250.507704] ? fs_reclaim_acquire+0x20/0x20 [ 250.512028] ? lock_downgrade+0x900/0x900 [ 250.516165] ? ___might_sleep+0x1ed/0x300 [ 250.520305] ? arch_local_save_flags+0x40/0x40 [ 250.524879] ? apparmor_capable+0x355/0x6c0 [ 250.529189] __should_failslab+0x124/0x180 [ 250.533410] should_failslab+0x9/0x14 [ 250.537199] kmem_cache_alloc_trace+0x2d7/0x750 [ 250.541859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.547388] ? security_capable_noaudit+0x96/0xc0 [ 250.552223] do_seccomp+0x908/0x2670 [ 250.555926] ? _parse_integer+0x180/0x180 [ 250.560066] ? lock_release+0x970/0x970 [ 250.564047] ? __seccomp_filter+0xe90/0xe90 [ 250.568367] ? usercopy_warn+0x110/0x110 [ 250.572440] ? lock_downgrade+0x900/0x900 [ 250.576585] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 250.582479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.588004] ? pid_task+0x115/0x200 [ 250.591637] ? find_vpid+0xf0/0xf0 [ 250.595184] ? __f_unlock_pos+0x19/0x20 [ 250.599149] ? lock_downgrade+0x900/0x900 [ 250.603288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.608817] ? proc_fail_nth_write+0x9e/0x210 [ 250.613302] ? proc_cwd_link+0x1d0/0x1d0 [ 250.617353] ? kasan_check_read+0x11/0x20 [ 250.621491] ? kasan_check_write+0x14/0x20 [ 250.625722] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 250.630687] ? fsnotify+0xaae/0x12f0 [ 250.634394] ? wait_for_completion+0x8a0/0x8a0 [ 250.638968] ? lock_release+0x970/0x970 [ 250.642985] ? check_preemption_disabled+0x48/0x200 [ 250.647993] ? fsnotify_first_mark+0x350/0x350 [ 250.652563] ? __fsnotify_parent+0xcc/0x420 [ 250.656873] ? fsnotify+0x12f0/0x12f0 [ 250.660675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.666246] ? check_preemption_disabled+0x48/0x200 [ 250.671302] ? __sb_end_write+0xd9/0x110 [ 250.675357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.680881] ? fput+0x130/0x1a0 [ 250.684148] ? ksys_write+0x1ae/0x260 [ 250.687949] ? trace_hardirqs_on+0xbd/0x310 [ 250.692265] ? __ia32_sys_read+0xb0/0xb0 [ 250.696329] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.701707] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 250.707150] __x64_sys_seccomp+0x73/0xb0 [ 250.711220] do_syscall_64+0x1b9/0x820 [ 250.715103] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 250.720635] ? syscall_return_slowpath+0x5e0/0x5e0 [ 250.725558] ? trace_hardirqs_on_caller+0x310/0x310 [ 250.730564] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 250.735587] ? recalc_sigpending_tsk+0x180/0x180 [ 250.740342] ? kasan_check_write+0x14/0x20 [ 250.744576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.749414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.754596] RIP: 0033:0x457579 [ 250.757781] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.776674] RSP: 002b:00007f6cd8270c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 250.784372] RAX: ffffffffffffffda RBX: 00007f6cd8270c90 RCX: 0000000000457579 [ 250.791641] RDX: 0000000020028ff0 RSI: 0000000000000001 RDI: 0000000000000001 [ 250.798907] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 250.806263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cd82716d4 [ 250.813537] R13: 00000000004c3037 R14: 00000000004d50d0 R15: 0000000000000003 23:45:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffefffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x440400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x7) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x5}, 0x2) pread64(r0, &(0x7f00000001c0)=""/39, 0xfffffffffffffcd6, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000000c0)={0x14005, 0x2000, 0x1f, 0x1ff, 0x8}) 23:45:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl(r0, 0x9, &(0x7f0000000080)="86ed840f367b1e9b744e57d2ba8782b5a48a8078d24961d5a625cb8f4a9811f8bfe66bbb950ee1f97f1d5089d749c245d5c1c30b774168354da29e44c65a") 23:45:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xd, 0x4}, 0x2c) 23:45:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x5500, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffff7f) 23:45:06 executing program 0 (fault-call:3 fault-nth:1): clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xef01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x700000000000000, 0x4}, 0x2c) [ 250.953173] input: syz1 as /devices/virtual/input/input199 [ 250.989205] input: syz1 as /devices/virtual/input/input200 23:45:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) fallocate(r0, 0x41, 0x0, 0x538db2f4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 251.025024] FAULT_INJECTION: forcing a failure. [ 251.025024] name failslab, interval 1, probability 0, space 0, times 0 23:45:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1200000000000000, 0x4}, 0x2c) 23:45:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7f01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 251.101016] CPU: 0 PID: 11221 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 251.108434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.117805] Call Trace: [ 251.120401] dump_stack+0x1c4/0x2b4 [ 251.124032] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.129236] should_fail.cold.4+0xa/0x17 [ 251.133482] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.138581] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 251.143342] ? is_bpf_text_address+0xac/0x170 [ 251.147836] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 251.153635] ? kasan_check_read+0x11/0x20 [ 251.157780] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 251.163049] ? rcu_bh_qs+0xc0/0xc0 [ 251.166588] ? fs_reclaim_acquire+0x20/0x20 [ 251.170906] ? lock_downgrade+0x900/0x900 [ 251.175050] ? ___might_sleep+0x1ed/0x300 [ 251.179194] ? arch_local_save_flags+0x40/0x40 [ 251.183779] ? __save_stack_trace+0x8d/0xf0 [ 251.188100] __should_failslab+0x124/0x180 [ 251.192345] should_failslab+0x9/0x14 [ 251.196139] kmem_cache_alloc_node_trace+0x270/0x740 [ 251.201229] ? save_stack+0x43/0xd0 [ 251.204844] ? kasan_kmalloc+0xc7/0xe0 [ 251.208719] ? kmem_cache_alloc_trace+0x152/0x750 [ 251.213551] ? do_seccomp+0x908/0x2670 [ 251.217427] ? __x64_sys_seccomp+0x73/0xb0 [ 251.221650] ? do_syscall_64+0x1b9/0x820 [ 251.225708] __get_vm_area_node+0x130/0x3a0 [ 251.230022] __vmalloc_node_range+0xc4/0x750 [ 251.234432] ? bpf_prog_alloc+0xe3/0x3e0 [ 251.238481] ? fs_reclaim_acquire+0x20/0x20 [ 251.242796] __vmalloc+0x45/0x50 [ 251.246151] ? bpf_prog_alloc+0xe3/0x3e0 [ 251.250207] bpf_prog_alloc+0xe3/0x3e0 [ 251.254084] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 251.258915] ? kasan_unpoison_shadow+0x35/0x50 [ 251.263483] ? kasan_kmalloc+0xc7/0xe0 [ 251.267367] bpf_prog_create_from_user+0xb1/0x2d0 [ 251.272197] ? hardlockup_detector_perf_enable.cold.3+0x20/0x20 [ 251.278257] do_seccomp+0x934/0x2670 [ 251.281964] ? _parse_integer+0x180/0x180 [ 251.286103] ? lock_release+0x970/0x970 [ 251.290068] ? __seccomp_filter+0xe90/0xe90 [ 251.294376] ? usercopy_warn+0x110/0x110 [ 251.298432] ? lock_downgrade+0x900/0x900 [ 251.302573] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 251.308366] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.313890] ? pid_task+0x115/0x200 [ 251.317506] ? find_vpid+0xf0/0xf0 [ 251.321150] ? __f_unlock_pos+0x19/0x20 [ 251.325114] ? lock_downgrade+0x900/0x900 [ 251.329253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.334786] ? proc_fail_nth_write+0x9e/0x210 [ 251.339286] ? proc_cwd_link+0x1d0/0x1d0 [ 251.343336] ? kasan_check_read+0x11/0x20 [ 251.347993] ? do_raw_spin_unlock+0xa7/0x2f0 [ 251.352391] ? kasan_check_write+0x14/0x20 [ 251.356628] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 251.361571] ? fsnotify+0xaae/0x12f0 [ 251.365284] ? wait_for_completion+0x8a0/0x8a0 [ 251.369855] ? lock_release+0x970/0x970 [ 251.373823] ? check_preemption_disabled+0x48/0x200 [ 251.378829] ? fsnotify_first_mark+0x350/0x350 [ 251.383399] ? __fsnotify_parent+0xcc/0x420 [ 251.387710] ? fsnotify+0x12f0/0x12f0 [ 251.391503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.397029] ? check_preemption_disabled+0x48/0x200 [ 251.402036] ? __sb_end_write+0xd9/0x110 [ 251.406084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.411613] ? fput+0x130/0x1a0 [ 251.414885] ? ksys_write+0x1ae/0x260 [ 251.418677] ? trace_hardirqs_on+0xbd/0x310 [ 251.422985] ? __ia32_sys_read+0xb0/0xb0 [ 251.427033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.432384] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 251.437826] __x64_sys_seccomp+0x73/0xb0 [ 251.441877] do_syscall_64+0x1b9/0x820 [ 251.445757] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 251.451201] ? syscall_return_slowpath+0x5e0/0x5e0 [ 251.456124] ? trace_hardirqs_on_caller+0x310/0x310 [ 251.461131] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.466143] ? recalc_sigpending_tsk+0x180/0x180 [ 251.470890] ? kasan_check_write+0x14/0x20 [ 251.475116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.479953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.485133] RIP: 0033:0x457579 23:45:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 23:45:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x2, 0x7f, 0x63}, &(0x7f0000000180)=0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 251.488324] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.507218] RSP: 002b:00007f6cd8270c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 251.515105] RAX: ffffffffffffffda RBX: 00007f6cd8270c90 RCX: 0000000000457579 [ 251.522366] RDX: 0000000020028ff0 RSI: 0000000000000001 RDI: 0000000000000001 [ 251.529627] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 251.536888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cd82716d4 [ 251.544148] R13: 00000000004c3037 R14: 00000000004d50d0 R15: 0000000000000003 23:45:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x80ffff00000000, 0x4}, 0x2c) [ 251.618462] input: syz1 as /devices/virtual/input/input201 23:45:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xde01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 251.663059] input: syz1 as /devices/virtual/input/input202 23:45:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xceffffff) 23:45:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xf00000000000000, 0x4}, 0x2c) [ 251.797258] syz-executor0: vmalloc: allocation failure: 4096 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 251.809388] syz-executor0 cpuset=syz0 mems_allowed=0 [ 251.826248] CPU: 1 PID: 11221 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 251.833661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.843018] Call Trace: [ 251.843041] dump_stack+0x1c4/0x2b4 [ 251.843058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.843078] warn_alloc.cold.119+0xb7/0x1bd [ 251.843091] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 251.843102] ? kasan_kmalloc+0x9b/0xe0 [ 251.843119] ? save_stack+0x43/0xd0 [ 251.849426] ? kasan_kmalloc+0xc7/0xe0 [ 251.849440] ? kmem_cache_alloc_trace+0x152/0x750 [ 251.849454] ? do_seccomp+0x908/0x2670 [ 251.849465] ? __x64_sys_seccomp+0x73/0xb0 [ 251.849477] ? do_syscall_64+0x1b9/0x820 [ 251.849498] ? __get_vm_area_node+0x2e5/0x3a0 [ 251.896640] __vmalloc_node_range+0x472/0x750 [ 251.901130] ? fs_reclaim_acquire+0x20/0x20 [ 251.905443] __vmalloc+0x45/0x50 [ 251.908802] ? bpf_prog_alloc+0xe3/0x3e0 [ 251.913506] bpf_prog_alloc+0xe3/0x3e0 [ 251.917386] ? bpf_prog_kallsyms_find+0x4a0/0x4a0 [ 251.922223] ? kasan_unpoison_shadow+0x35/0x50 [ 251.926795] ? kasan_kmalloc+0xc7/0xe0 [ 251.930681] bpf_prog_create_from_user+0xb1/0x2d0 [ 251.935518] ? hardlockup_detector_perf_enable.cold.3+0x20/0x20 [ 251.941574] do_seccomp+0x934/0x2670 [ 251.945293] ? _parse_integer+0x180/0x180 [ 251.949436] ? lock_release+0x970/0x970 [ 251.953406] ? __seccomp_filter+0xe90/0xe90 [ 251.957716] ? usercopy_warn+0x110/0x110 [ 251.961778] ? lock_downgrade+0x900/0x900 [ 251.965940] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 251.971742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.977266] ? pid_task+0x115/0x200 [ 251.980881] ? find_vpid+0xf0/0xf0 [ 251.984414] ? __f_unlock_pos+0x19/0x20 [ 251.988377] ? lock_downgrade+0x900/0x900 [ 251.992517] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.998046] ? proc_fail_nth_write+0x9e/0x210 [ 252.002532] ? proc_cwd_link+0x1d0/0x1d0 [ 252.006589] ? kasan_check_read+0x11/0x20 [ 252.010732] ? do_raw_spin_unlock+0xa7/0x2f0 [ 252.015131] ? kasan_check_write+0x14/0x20 [ 252.019359] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 252.024278] ? fsnotify+0xaae/0x12f0 [ 252.027994] ? wait_for_completion+0x8a0/0x8a0 [ 252.032569] ? lock_release+0x970/0x970 [ 252.036536] ? check_preemption_disabled+0x48/0x200 [ 252.041559] ? fsnotify_first_mark+0x350/0x350 [ 252.046132] ? __fsnotify_parent+0xcc/0x420 [ 252.050448] ? fsnotify+0x12f0/0x12f0 [ 252.054241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.059773] ? check_preemption_disabled+0x48/0x200 [ 252.064795] ? __sb_end_write+0xd9/0x110 [ 252.068852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.074379] ? fput+0x130/0x1a0 [ 252.078129] ? ksys_write+0x1ae/0x260 [ 252.081925] ? trace_hardirqs_on+0xbd/0x310 [ 252.086237] ? __ia32_sys_read+0xb0/0xb0 [ 252.090301] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.095655] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 252.101098] __x64_sys_seccomp+0x73/0xb0 [ 252.105152] do_syscall_64+0x1b9/0x820 [ 252.109029] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 252.114486] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.119407] ? trace_hardirqs_on_caller+0x310/0x310 [ 252.124413] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 252.129418] ? recalc_sigpending_tsk+0x180/0x180 [ 252.134175] ? kasan_check_write+0x14/0x20 [ 252.138403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.143247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.148425] RIP: 0033:0x457579 [ 252.151610] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.170518] RSP: 002b:00007f6cd8270c78 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 252.178230] RAX: ffffffffffffffda RBX: 00007f6cd8270c90 RCX: 0000000000457579 [ 252.185490] RDX: 0000000020028ff0 RSI: 0000000000000001 RDI: 0000000000000001 [ 252.192751] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 252.200007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cd82716d4 [ 252.207276] R13: 00000000004c3037 R14: 00000000004d50d0 R15: 0000000000000003 [ 252.220736] Mem-Info: [ 252.223981] active_anon:123994 inactive_anon:116 isolated_anon:0 [ 252.223981] active_file:7742 inactive_file:36870 isolated_file:0 [ 252.223981] unevictable:0 dirty:155 writeback:17 unstable:0 [ 252.223981] slab_reclaimable:10924 slab_unreclaimable:119117 [ 252.223981] mapped:55181 shmem:128 pagetables:1159 bounce:0 [ 252.223981] free:1248865 free_pcp:865 free_cma:0 [ 252.263171] Node 0 active_anon:495976kB inactive_anon:464kB active_file:30968kB inactive_file:147480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220724kB dirty:520kB writeback:0kB shmem:512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 354304kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 252.291603] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.318156] lowmem_reserve[]: 0 2819 6323 6323 [ 252.325063] Node 0 DMA32 free:2889372kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890736kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1364kB local_pcp:0kB free_cma:0kB [ 252.354173] lowmem_reserve[]: 0 0 3503 3503 [ 252.358612] Node 0 Normal free:2092180kB min:37352kB low:46688kB high:56024kB active_anon:493844kB inactive_anon:464kB active_file:30968kB inactive_file:147480kB unevictable:0kB writepending:444kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:5760kB pagetables:4488kB bounce:0kB free_pcp:2100kB local_pcp:1344kB free_cma:0kB [ 252.389658] lowmem_reserve[]: 0 0 0 0 [ 252.393498] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 252.407808] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 703*4096kB (M) = 2889372kB [ 252.423170] Node 0 Normal: 8735*4kB (UME) 3140*8kB (UM) 2741*16kB (UM) 1998*32kB (UME) 797*64kB (UME) 48*128kB (M) 10*256kB (UE) 9*512kB (UME) 2*1024kB (UM) 3*2048kB (UM) 452*4096kB (M) = 2091756kB [ 252.441617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 23:45:07 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xf901, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xffffffe4, 0x4}, 0x2c) 23:45:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0x1}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='syz1\x00', 0x5, 0x2) 23:45:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16) 23:45:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/230, 0xe6) [ 252.450515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 252.450535] 44739 total pagecache pages [ 252.464250] 0 pages in swap cache [ 252.467719] Swap cache stats: add 0, delete 0, find 0/0 [ 252.473609] Free swap = 0kB [ 252.476634] Total swap = 0kB [ 252.480228] 1965979 pages RAM [ 252.483342] 0 pages HighMem/MovableOnly [ 252.487407] 342307 pages reserved [ 252.491197] 0 pages cma reserved 23:45:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xe, 0x4}, 0x2c) [ 252.525010] input: syz1 as /devices/virtual/input/input203 [ 252.557962] input: syz1 as /devices/virtual/input/input204 23:45:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2c01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x500000000000000, 0x4}, 0x2c) 23:45:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 23:45:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xa001, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20480, 0x1) r1 = geteuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x4, {0x92, 0x2, 0x3}, 0xe0, r1, r2, 0x69ea, 0x6, 0x8000, 0x7, 0x7, 0x3, 0xfff, 0x100, 0x3, 0x1, 0x2, 0x3, 0x4, 0xfffffffffffffffb, 0x10001}}, 0xa0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x4b4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) 23:45:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x3000000, 0x4}, 0x2c) 23:45:07 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x18c678, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 252.795615] input: syz1 as /devices/virtual/input/input205 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x900, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xa00, 0x4}, 0x2c) [ 252.879966] input: syz1 as /devices/virtual/input/input206 23:45:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 23:45:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000180)={0x0, 0x2710}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioperm(0xd87, 0x9, 0x81) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3, 0x1}) epoll_create(0x800) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xd800, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x5, 0x4}, 0x2c) 23:45:08 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0xffffff1f, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffce) 23:45:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x13000000, 0x4}, 0x2c) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x8401, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 253.418010] input: syz1 as /devices/virtual/input/input207 [ 253.470502] input: syz1 as /devices/virtual/input/input208 23:45:08 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x2600, 0x4}, 0x2c) 23:45:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xe500, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:08 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x5, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x6081) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 253.675888] input: syz1 as /devices/virtual/input/input209 [ 253.694388] input: syz1 as /devices/virtual/input/input210 23:45:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f0000000100)="766574000000000000000000bd6800", 0xf, 0x2) 23:45:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 23:45:09 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xffff8000, 0x4}, 0x2c) 23:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xc00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:09 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x9d, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:09 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x13, 0x4}, 0x2c) 23:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7200, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 254.310675] input: syz1 as /devices/virtual/input/input211 23:45:09 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1400000000000000, 0x4}, 0x2c) 23:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x6e00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 254.378881] input: syz1 as /devices/virtual/input/input212 23:45:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 23:45:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x2, 0xa094}, {0x7, 0x81}, {0x5, 0x4}, {0x8, 0x96}]}) pwritev(r1, &(0x7f0000000c00)=[{&(0x7f0000000980)="68ca53488692fb4e7f4fb99f0f64bfbfdf3594e7daa336d0ab53fdc53542f214d30633ca", 0x24}, {&(0x7f00000009c0)="9bb15ea9feec3433d32545d336", 0xd}, {&(0x7f0000000a00)="3102631fe19f4a6ac015668fa1f8e77e5fbb8bdd21a8b9e1767329131716e80f0192fb3b1c4e7f7d32eb0a382467d9", 0x2f}, {&(0x7f0000000a40)="bca92c3bfdee2bf26b9ff216955a9af8734e21eaa4e17ba777582a097c98aa20db7acecce7b2627282fbfa6afa97ef1a68d680abb9ee55dca6efca78b77eed25baa07915ee94d1f5a2c3bd6714387e85fd6de237cb056e9c69fbd13a5541f7b9a80f50aff8b96acfc97010c786f1f5737a22f5b03e07a7151a0623c4456cc2635fc5b4f4bb83a4e0726f425bb61f4d1c2943e1dc8a9cb61ca85d6feeffe1a777d054220bc4d24f87526c4812c4098c1ddf8a4b0fb1ce7daf43523bb8497a78", 0xbf}, {&(0x7f0000000b00)="2af541db5539a402966667a6c39be4d1c700130dfd94ccab6bbc07f8678c8fde9c746c054f5aa730815e5d5d2ed268be9772048551792374f6dccce3007e6969fe157172c7df583dd77f5b7d9b5f44d78dc338f15812917444f03dc3", 0x5c}, {&(0x7f0000000b80)="6ba003f8300256a74608feb186b3ed10dc92ed539508325526f0626735303680aab9c2b32f4e694a0429821c53203ef83df517de36e1beae6432908ea943899a4c00cf6437416ab2718e9756bbf793580335c4d10e88f593b074373b27827ced28b290cbc9d269ed690ace8998fade", 0x6f}], 0x6, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x54, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="b5abf27d2000d05c"], 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) fgetxattr(r2, &(0x7f0000000840)=@known='system.posix_acl_default\x00', &(0x7f0000000880)=""/211, 0xd3) [ 254.576769] input: syz1 as /devices/virtual/input/input213 [ 254.603731] input: syz1 as /devices/virtual/input/input214 23:45:10 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x300000000000000, 0x4}, 0x2c) 23:45:10 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x2, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xd101, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 23:45:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/39, 0x27, 0x0) 23:45:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x0, 0xeb5, 0x1000}, 0x18) 23:45:10 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xd000000, 0x4}, 0x2c) 23:45:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x9d00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:10 executing program 2: r0 = msgget(0x2, 0x4) msgsnd(r0, &(0x7f0000000100)={0x3, "2f32089d97936b51bcad6c6e9329f72c4410ebe70c357945c3eb64a870e80f3d6c1952d8d807c460337d9e91833646210b6dbec167e77d76093eac00fa84b1bb7ec7745f87d059faf382c3569891f850416f60b72d5bf2ef5c4a77aa260fead805b156f05851f3c8934a69ade24e26321689a58fbb7151e54a4b1ae6c7eca9b5ba0448fe782349568f8fc83f70b0d047794377c5013fc54fe9158378bbbd49b9ad3c463ea1767ee6904115dd4e2d896100a5e60b"}, 0xbc, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/4096, &(0x7f0000000080)=0x1000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 255.212609] input: syz1 as /devices/virtual/input/input215 23:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19) [ 255.272397] input: syz1 as /devices/virtual/input/input216 23:45:10 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x4000, 0x4}, 0x2c) 23:45:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xc01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:10 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x3, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:10 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x3, 0x4}, 0x2c) 23:45:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x301000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f00000000c0)={0x2, 0x8000, 0x9, 0x72b561c4, 0x5, 0x3f}) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 23:45:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2a01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:10 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1100000000000000, 0x4}, 0x2c) [ 255.489189] input: syz1 as /devices/virtual/input/input217 23:45:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xb901, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:10 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x6, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 255.554421] input: syz1 as /devices/virtual/input/input218 23:45:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xffffffffffffffd5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffff9c, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r1, 0x0, 0xd, &(0x7f0000000100)='/dev/net/tun\x00', r3}, 0x30) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) socketpair$inet(0x2, 0x4, 0x6, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000340)={0xffffffff, 0x3, 0xe4, 0x7}, 0x8) 23:45:11 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x200000000000000, 0x4}, 0x2c) 23:45:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2b21, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)) keyctl$set_reqkey_keyring(0xe, 0x7) lseek(r0, 0x0, 0x4) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x5d00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 23:45:11 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x13, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) [ 256.240031] input: syz1 as /devices/virtual/input/input219 23:45:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x6700, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:11 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xb00000000000000, 0x4}, 0x2c) [ 256.286749] input: syz1 as /devices/virtual/input/input220 23:45:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x9e01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:11 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x10000000, 0x4}, 0x2c) 23:45:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0xfffffffffffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x480, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000cc0)='/dev/input/mouse#\x00', 0x10000, 0x20000) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000d40)={0x3, &(0x7f0000000d00)=[{0xfff, 0x2, 0x0, 0x4}, {0x48, 0x9, 0x3c8f, 0x4}, {0x80, 0x3f, 0xc7, 0x3}]}, 0x10) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {0xffffffff9621e4c7, 0xa4a5, 0x80, 0x354a}, 0xc5d, [0x8, 0x80000001, 0xa2cc, 0x7, 0x7f, 0x5, 0x460, 0x1, 0x800, 0x0, 0x3, 0x6, 0x7, 0x2, 0x800, 0x2, 0x8, 0x2, 0x8000, 0x8, 0x90, 0x7, 0x9, 0x80000001, 0xe77c, 0x10001, 0x86, 0x0, 0x650, 0x7, 0x0, 0x6, 0x1ff, 0xfff, 0x4, 0x8, 0x7f, 0x20, 0x9, 0xfffffffffffffffe, 0x5, 0x9, 0x3, 0x3, 0x401, 0x400, 0xe51c, 0x1, 0x1, 0x2, 0x1b06, 0x1, 0x4, 0x9, 0x100000000, 0x5, 0x7, 0x4, 0x61, 0xfffffffffffff000, 0x80000001, 0x7, 0x9, 0x4], [0x5, 0xfff, 0x5, 0x3, 0x7, 0x20, 0x2, 0x8, 0x3b93, 0x1, 0x2, 0x8, 0x4, 0xd1a, 0x6, 0x200, 0xffffffffffffffff, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x40, 0x20, 0x100000000, 0x778f, 0x4a6b8cd7, 0x4, 0x101, 0x3ae, 0x40, 0x4, 0x80000001, 0x10001, 0x7ff, 0xffffffffffff8000, 0x0, 0x50, 0x5, 0x1ffe0000, 0x100000000, 0x1, 0x3, 0x0, 0x9, 0x6, 0x81, 0x5170, 0x6, 0x2, 0x6, 0x1, 0x7, 0xe27, 0x3ab, 0x80000000, 0xa875, 0x8, 0x6, 0x2, 0x1f, 0x8, 0x7, 0x101, 0xffffffff, 0x41b7, 0x5], [0xfffffffffffffff7, 0x7f, 0xffff, 0x0, 0x8, 0x6, 0x8000, 0x1, 0x8804, 0x100, 0xd3b4, 0x6, 0x6, 0xffffffffffffff80, 0x2, 0x7, 0x401, 0xab9e, 0x7, 0xce, 0x6, 0xa11, 0x100000000, 0x796cb5fc, 0xbdd, 0x400, 0xfff, 0x5, 0x1, 0x800, 0x6, 0x5, 0x1f, 0x4, 0xf2, 0x3, 0x1, 0x4, 0x0, 0x1, 0x3ff, 0x9, 0x5424, 0x1000, 0x2, 0x7, 0x5, 0x71, 0x7fffffff, 0x6, 0x8, 0xeac5, 0x7, 0x54, 0x81, 0xffff, 0x1, 0xba2b, 0x1, 0x4000, 0x60000, 0x8000, 0x1, 0x100], [0x1, 0xff, 0x97, 0xffffffff, 0x561f, 0x800, 0x3, 0xfff, 0x1, 0x8, 0x9, 0x81, 0x6, 0x200, 0x400, 0x2, 0x10000, 0x7, 0x8fea, 0x4800000, 0x1, 0x8001, 0x80000001, 0x9, 0xeb, 0x3, 0x7, 0xffffffff, 0xf807, 0x100000000, 0xffff, 0x5000000, 0x8, 0x0, 0x2, 0x2, 0x5, 0x4, 0x7, 0x4, 0x0, 0x3ff, 0x10001, 0x7ff, 0x1000, 0x140, 0xc07, 0xfffffffffffffe01, 0xffff, 0x3, 0xff, 0x7, 0x0, 0x9, 0x9, 0x8, 0x5, 0x1c76, 0x2, 0x2, 0x3, 0x9, 0x0, 0x9]}, 0x45c) r2 = syz_open_dev$dmmidi(&(0x7f0000000c80)='/dev/dmmidi#\x00', 0x5, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x4, 0x7f, 0x67911ba1, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x7, @loopback, 0xc}}, 0x7fff}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x6, 0x73, 0x5, 0x3, 0xff}, &(0x7f0000000280)=0x14) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000c40), 0x4) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x45c) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) [ 256.480156] input: syz1 as /devices/virtual/input/input221 [ 256.530886] input: syz1 as /devices/virtual/input/input222 23:45:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x12000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x14) socketpair(0x0, 0x7, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0xc61, 0x76cd8d3b, 0x8, 0xfffffffffffffffd}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x10400, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:12 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x13, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:12 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x900, 0x4}, 0x2c) 23:45:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x8801, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 23:45:12 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x18, 0x200041) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x100000000, 0x200, 0x3f, 0x8, 0x3, 0x7b3a, 0x8a, 0x9, 0x5, 0x8d9a, 0x3, 0x0, 0x1, 0x3f, 0x5], 0x100000, 0x1}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:12 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x600000000000000, 0x4}, 0x2c) 23:45:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x8301, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 257.121382] input: syz1 as /devices/virtual/input/input223 23:45:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) [ 257.188450] input: syz1 as /devices/virtual/input/input224 23:45:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xf900, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:12 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x400000000000000, 0x4}, 0x2c) 23:45:12 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x18c678, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x68d, 0x3, {0xffffffffffffffff, 0x3, 0x1, 0x0, 0x7fff}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0xc8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x10, &(0x7f0000000180)={&(0x7f0000000080), 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000380)={&(0x7f0000000280)=""/147, 0x93, r2}}, 0x10) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000400)={0x0, 0x0, @ioapic}) 23:45:13 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1100, 0x4}, 0x2c) 23:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 23:45:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x8c00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:13 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0xffffff1f, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]}, 0x45c) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r2, 0x76, "0b2aa9", "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"}}, 0x110) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2a00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:13 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xd00, 0x4}, 0x2c) [ 258.053364] input: syz1 as /devices/virtual/input/input225 23:45:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7d00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) [ 258.118013] input: syz1 as /devices/virtual/input/input226 23:45:13 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xb, 0x4}, 0x2c) 23:45:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0x7f) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 258.309702] input: syz1 as /devices/virtual/input/input227 [ 258.345388] input: syz1 as /devices/virtual/input/input228 23:45:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200040, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000280)={0x5922, 0x100000001, 0x1, 0x7ff, [], [], [], 0x2000, 0xffffffffffff7fff, 0x8, 0x1, "cf3031b739cd7c18446b1a3f9b9cab9b"}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x8000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:14 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x5, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x900000000000000, 0x4}, 0x2c) 23:45:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7701, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x20000) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0x4a) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100000001, 0x9, 0x4}, 'syz0\x00', 0x1b}) 23:45:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdee0], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) io_setup(0x1, &(0x7f0000000080)=0x0) io_getevents(r1, 0x100000001, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)) 23:45:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x2600000000000000, 0x4}, 0x2c) 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x4f00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) [ 258.994782] input: syz1 as /devices/virtual/input/input231 23:45:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xd00000000000000, 0x4}, 0x2c) 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x500, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 259.060734] input: syz1 as /devices/virtual/input/input232 23:45:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xd00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:14 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x14000000, 0x4}, 0x2c) 23:45:14 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x9d, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000000000000) 23:45:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x5000000, 0x4}, 0x2c) 23:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7e00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 259.865743] input: syz1 as /devices/virtual/input/input233 23:45:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x600, 0x4}, 0x2c) 23:45:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 23:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xad01, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) fcntl$dupfd(r0, 0x0, r0) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:15 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x2, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x601, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xc00, 0x4}, 0x2c) [ 260.062595] input: syz1 as /devices/virtual/input/input235 23:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x9501, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 260.134270] input: syz1 as /devices/virtual/input/input236 [ 260.269095] audit: type=1326 audit(1538869515.417:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11829 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:45:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) 23:45:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x11, 0x4}, 0x2c) 23:45:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xb401, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:15 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xc00000000000000, 0x4}, 0x2c) 23:45:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2000, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 260.790643] input: syz1 as /devices/virtual/input/input237 23:45:16 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xe00000000000000, 0x4}, 0x2c) 23:45:16 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x3, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x0, 0x3f, 0x1, 0x5, 0x1]}, 0xe) 23:45:16 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xe4ffffff, 0x4}, 0x2c) 23:45:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) [ 260.971368] audit: type=1326 audit(1538869516.127:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11829 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 261.030860] input: syz1 as /devices/virtual/input/input239 [ 261.067254] input: syz1 as /devices/virtual/input/input240 23:45:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x400400, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x19, 0x5}) 23:45:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xd400, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:16 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x80ffff, 0x4}, 0x2c) 23:45:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 23:45:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x4280) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000004c00)=""/117) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000300)=0x0) stat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000048c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000049c0)=0xe8) lstat(&(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000007c0)={0x3cc, 0x20, 0x200, 0x70bd25, 0x25dfdbff, "", [@generic="46287b35533335fdd04e0449c02a24837a62df991842f0bbfe4f1d356dd15ae65c9addedbd1c1011c14e58a9861fcea51b58a28f081a71e5b9cf1aaeee659c18c486bef0bb5156ded9c1209f1b9aa2eafb0b787138681a159248fc6e24960e0819ab51deea", @typed={0x70, 0x7c, @binary="8a78d714e8c826a853fc7e1e39c5ec9b1e4e7975e08c32cffcc4c3a58f229a7195113da2e11f8d9978dcc2a90fc1bd875dabe8ad000b41bdff8932aab5742eb0e861b2ccdaa983d03c34006d0117b635468e4701ce662cd2b42b9e020c7d4cc818e4c24934a5cb3281558738"}, @nested={0xa8, 0x5a, [@generic="0a0b8fd727da6c79", @typed={0xc, 0x47, @u64=0xe64}, @generic="639670400f1d0d72de31020070d169e50430096f324f175ca22fb55f30daa0ad45a95a9429e64226ce73c04b894b97ee3f8ddb0d4b418bfe47bc08cdd5d1778c0dd5127b4c7225a9544ce8906ed2c4f53916e04c6910bec0b68ee5afd44b24d2afe0313060e47b96bff839def515bd", @generic="6ef013b9bb3dfb14718a4ee427b7c98655e3272c6cc73c51b4d2e9e0d7593f01"]}, @generic="69ed27b95aa4388d90edce2182010cf927141c6596e6ac42912e73633fd714ab6070b7d172c20f6c90e8b8a0eca5204b5e642d910faaed3433a109b9b802a66aebe50397f57656080e689b86a48b4e19d1f2ec3712002454c3b8d0b82e32c1dcb649c5fbbb4a2ba265714992f762e2973859", @generic="d3a83afc1bc8bc980b713714eef440b7376eed1b27976727c0ec0c2fc7d56d376bc5ee3f55261a81b61cf381de4d37608adda6c2699cbced6ce70eda2535a8b8a2a71cfe7a2427daeb7625e92b3d0f9a7564c6c206f9f20964e4962a3ae34331f1c449ec8e158eae304e66cdb5d67c1b9317cbb231cd78f86ec79999d889e3166d141a56ff989d83556f91159208e000d772c3a4322d3818c306708e038f12b4661caac6f908e4b3cbfd7a1ebe", @nested={0x98, 0x4b, [@typed={0x48, 0x6c, @binary="4a49d7f734b7910c9d6bc35a104a004bdf8920cdc06671067e7ca8368d865798a8331838279c02136367355eda8f7a49e2faad24600576d04161dc7650e5faae5c6d"}, @generic="e84286c7f7d0e3aeee8fd86af5d577a029ee7ce7360e7db461b70d247981a393e75918bcaff83dc3ce60df3afebf2ecd1e952e258c45f31a5b4ac7aba76a2c7c5c3268e2a3e799370c86cdb9"]}, @generic="1b6eddba981bfa93325b096e129be5352fa80b2afc799734ad87dd12f991219fea99d3bfe8435a35a9f484493c661c6262a0705b5405ba0924982046ebe342e591e30c6eb0ffa2e1b7bfe655c8914645889a6c4418652d162f4fb91ef8643a68ce98a8e915e42be1f6b47d1b5e5c374d489286a2152897306458a6f1b3d497bc1eec801762"]}, 0x3cc}, {&(0x7f0000000bc0)={0x5f4, 0x1e, 0x0, 0x70bd28, 0x25dfdbfc, "", [@generic="73f7f411308e3d3e53d369b6a7550c3de708b76c706bdaa7ee05892f2be8422e47db7f9e8257290818aae3a67f8ea1f963b7f8ac837a82900c2e6efea40bc9ca30af0572e05e5383e69dd6c461e668fb3de0570511d64acf9ec5ee29", @nested={0x188, 0x66, [@typed={0xc, 0x1c, @u64=0x4}, @typed={0xcc, 0x5d, @binary="0f33ebe885c7fb83f5147ebe7f61f511b455750437db13f62ce5d41a0cdfccff5d5ec83b13942e5a40d9e893ff405fb50ae75926258b0cf4cf81ca2c58084b818d75a8fdfc58511292ea0fbcae27f6e3275719644af997cc3099ae7528ea7e150b7e11dcc23009ed3cbc5ec7efedbbb789046dd112a882ceb8872872751633d252be36f2bf7d14b3c7f417598b86a22eda715012ea7e1b951c73536719698ed579a13a1ffe28e9c44a01b548630e5e7f11269aef42537847275f28a325ea6f89b1612227c42e80"}, @generic="df9cb2a92c0e42d165d96aa459abf9e86c8d83b3895d6d18253e5db9e1378eb37328dc97b7e14cb6219ba9e90f82a1522977d9d96b8f6011add487076f3835bf3a27231ce8b6e0cce2e42649965b622f133eec4c7f8a40d9e2bbf851375ebdd88d3e46893bfe673f01afd44ba0b528fad82e181bae3d70a30354b958e71663e11cb06288b056ac89ef4032aadf2f258c7c315c98c0c9a20f9a7399f3ee1c166d00", @typed={0x8, 0x86, @pid=r2}]}, @nested={0x124, 0x49, [@generic="80196eb7fdb19f166b236309eeccced1bf5952c15a1f4b17f0557bf4e03299b17ad08b", @generic="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"]}, @nested={0x2a8, 0x79, [@generic="325ff0f87533770794886b8c025950bd4c14c5c53bbf3a84e30545bad562d7e487c19987b1d79c57d23290708e4d9baab484e60f27e8067a5be36a2b445173b7c0109190135bac00934d346c5b65080c995947825c2f4aae67aa67e1b74238edee49", @typed={0xc, 0x1b, @str='syz1\x00'}, @typed={0xe8, 0x62, @binary="3e8d281a5e42500702f1843ad1121a4b30586e74e01e04976cc142d8f78b6fc5c69be149cfae26df49b6da124036eadc495eeb610b345dd273b442113085c29a76308c6c7c99be9d89900457e2384712dbea4e00d30d23860ca7f39029cd95e6a3f1284fe96ee3ffc86a04dc4bd4bb9149a67fb3d4198182d62218069e10f927592cc704ff9bca9b8a26eb3512d8a03a81e1563da3ee9463a8c2cf322ac8820022e86618535074cb8483e5ecb672450c8760bee715f9843dcbfb65a03051856277b3c3f696995f5a1b6d6a0ed6a86947331e6ab15f5f0c76ea2432909b46f11070238f"}, @generic="cfdcf5be0a6fa74b05570fe2210fd747eae342d11401e46c9a410378d260693f4d610e119c8d659bc606ced1e56adf931feb55be1bfbe59de9a13d446edca75d63c63010c06125c8560b05d6137fad999fec6e6adb8465c0286e2a7f3e8bafda1e1c3b586d7dcee8b50df12bb564182af0b73957d393bea40b32682a8c0e4b8a42561570", @generic="37b3e410cc242d8bb936f887b23361edbc8eb96afddd2c0937540005ad2b7aac4fcf49e7e2c43a7907c9f770ceca3630a5294aaea0fa6b0ff29c7d7eabad563fd56e0be9702101b0b364b6d589a0a18c987e7be737df1e10b0b94475b5e91312a85405a18c722c16", @generic="b9d44fe6165060a88ed64ebf52d5ebb8d91c8323891179681804acfaeb21de1f9a41d3d034e20b3fdcf3e767c9ada9c1c7c993ae8996443699d5ab62d1f88ce90bc395839c8c83cd8129b54f9624e492a315cfac8bf9f896a1d192a34902c36bd2"]}, @typed={0x8, 0x52, @fd=r0}, @typed={0x2c, 0x6d, @str='cpusetvboxnet1bdevvmnet1procmime_type\x00'}]}, 0x5f4}, {&(0x7f0000000100)={0x90, 0x23, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@generic="af61c57497d798d718555ee960670ac8b548be5c006eea467a744f40d337a453877425ac6e78b70534fda0cd783279a825713bd624d5bb11fd11bf0a6f94b22d20d965eb754729c82166ebb33792338f668dbb87230bd0ad31699172c8e1ed7f87a50a61beb78ae189e514f1aee639947ba94eaeec0b129c517f1c004a5fec63"]}, 0x90}, {&(0x7f00000001c0)={0x68, 0x37, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="76d26c2b06d3b7ebecdb15afa29bceb6d6a66bf27d0968ba3030b02818dfb82add381154eada0682db7b58c24b481ea9ee5e980feee3b21d753b41843d8d38d5c8d3825e313c9ac6808425a7c65487b0c4b97842907a2d"]}, 0x68}, {&(0x7f00000011c0)={0x1054, 0x27, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x86, @u32=0x2}, @nested={0x1028, 0x48, [@typed={0x14, 0x25, @ipv6=@remote}, @typed={0xc, 0x6e, @u64=0x419}, @typed={0x1004, 0x57, @binary="53a7030194c5ff92f5eb8c92393c920867d7f255b890f5a30a7991d85d4d52db3a06e8023981845023e44b64b83f28ff8e835a17fb0c7280cdb3af15c1ec4421ba21c0f5d5ca7fb8ebad1a92602aa6407c6c54139a485d89e293f1910c7ca65ce8bc8cae618d39ac2dea9a5b74eb3af92f7c6be6216d672b1bd2063879f9fdad6df35f29b6f9694345066b0c0fe83d9de72e54257c88c8d80c39102799fc6b4b6f0fe1febdc47bcf1a498c59f89d807044713a261cff129cfc498dfbe91c2be19ef12d249e6fd20ed228695378659f2f3bcce464e89d2e9bd03aec43af8b3fe630c211aa16f5b6437ed09db6979c3effaebd41b635f7cf2d383c7b6aa0e56209417c0a523abdf3161bfd5c263c9ca4c8d22b40db19e923e8f35cf5554881fbef08d6c139d02cdf3677421ee560d273ff4ab3beed36362251c9555df3892a7bff24633f6b140ccb7cef6166dc359b522f96014b88173cb633f07de0a9f9ede62e63883c024503d9d051c4817119b186071ba0466d3847a12b5a13242fd61d3ae9e53b8e0837a08967757abe69dbf92786efe7e2f2c951d466a494f1e0ca3d52029ef6270f0fd9540ad43d8cb87e0fced77776e398eaaa9f917ebce45b0fcf44eb62c17aa3e14d2fc3c415284526c6543d3588cb33a77aeb2bd11d7088fd67c3373f29b097825ed96f1f0ec82518775ec24462feac709679dbeb452525675b55b6413e376f372eaa15f7c853cd2a799fd03ec5600ca2ce2fb7a3969c6311c882cffe917103326fca31ab72e03a766b468834be529daa010447a23c30fc90bbdb5750c55ede1df7420faa84deeb0d243e1f0dfc1d0b49374b174096eea1bc89d6a5d79a03df4e16cfab1e7d1019e68bf64e0656def4923ba7e34ae39cdebf6c8dc10e03a280efbc97c40fa677dc6fff1dc86c40528a14a920561b259080561f1ae2a8b0dcb7bd4809c013be27510b707dce6ff20ac1576d63379ec6cf9834246cb794032545262356cd7c191859464ac87467cea89c1048784b95ca4da13f2373c13094b2812d11bd30313c2a80703b05ab66934f2d1f4b36e5a92f35622184c2ced12661bc70ec669325779e1dc2e7cc99277c65546e49caa75f85c43ce9565a3dc26ceaff7b75dc01df0cea15c8b0f7be9be3f65aa1600b9b6c98b58fc6b552774b466868936045831840f2c898cebb8914927b93d5ec257a4b25ef7fd16f2d809b174f57c83d4d67149cbc2b3d6152a8d017751cc872fec20813d2599ae27afe24c88fae2172711e2568c8fdb1326bd874ccf0d8b6110e611a6d990106eafe422bacac6797e02610b88202c51ca84fb0e3f339f3f4737bfa3ef468203ff19fe156acf44fc5303db4fb1f37e949bb2c8757da705d8cc74fb1e1a049ee768133aeaff6d6df3d9aafeec65434299a67aa63a813867bd2017762c5221df4bdc33da3a28da25e0673550b2235e7b472f05b3a44b4bf4b660f7de55009d3aeec07d22e5ba12046a19e0d8ebc87caea023e9390c68d9f917966a0ad1f4f95e77c8ce836e74c7a78b87ad02aa935bece06247897d94af2d9ff0d3c30c83d655924ed84fdc84c01b2c17f021d439ff21af970406c46fc23f125f7f4f0fdb100cef3c030513a411ba78c92a3aa34e84e49c4e16bafbd766539af25b9135a566559b98c89bc9dd2ab0ed0f920b9e6f959a625440a0b3f49b7f59ee3f766a7a623bf4ff24d274ae7d28709c31e99774f0d4fab353fa53735a1878b6c14879898fef655d77c3b8af95b601a248c5f57587cb8ee9449a0ee0281eb895ef0cb1356d58a48b449521385cb43c3dcc18a20ec7329653a91ac95ac4ffacc69aaf4d1f2cd1cd9dfa7ef3d69f9e56fbcddf9ff68621af8b57b3afd033e308e19eaa2590a280a0e7600c424790fcca23797d1ea4acf052281384ec9367999c3ef5f795adf98df52c9f249bd3b0662c566a061a8665b2841f087ab7a2da070fc8c2761a207dbdc7053ae02d830fb9f6702f9d3fde8c6c97feb7ecc34309bbc08972e1042ea7814ff1759b7f525dff89af4a8d2534d1ffe2775169e4e196580faf5736cded5792a1653c4a5238ea07f33eb4a0c0363d26120a29b1d3fc0039af9088627ac4aa8a8322633646dc7e3c2f9fc8b3aef6095b029c1aff0087bd211722985a7ccf15a82a3ecd6754c9a6a18cbaf6fa84d161cf13298652d454c78bfb73ed7007f890cb31b041be8588afc142a091ea51409db17d70566fecaaec785adbe6ebe9a4857d99b2c642b31d3e37bca3e08b0f78e33c371b8d9a8d7abf4e2ce19995cf4083f8dc85f25dadc6b957f0d19fa82ae41940bcfae0336fe7c866c72434cf16b7b14472f131fe34d9a74410e091be3e86df1de1b03e3759078c1750607b0192392cf435668216618aea95436d8c2d84600b87e3877ae3301e7ffdf05d725700fb9a744ecac73deea50cc2700fd12b70bd1ef729b56c00aa24680c67728dc48bd0432c52151f3d55f5a68902d9db2bb0ffa936c8a9dd5f0dbd30193e7b310e69055ba4f3cb27e4cc2b389a20b93e26ba0259780c7adf816be039008fbc316164f70d56ce480bfb01417d38283d6d84f4f8cd8b8e85baa531df91187803f90b63e130030ee5340f1f7250ee1aa391dc5171601456ee4cc532db2be6cdabb091c07cc197c78bb0bec2da2efb8bf90a4ba496832a4c85a0cbb872c6561e9b80ecc747b5e6dea769d409ff761f5294f3d4b5ace950dfdab4e1ce68ccb025bf9ac75ee117700551bc708ee9f4563ac9dd99b63f398f2c58fb6ea9c91486d4396511cb7dee00b472bc06b6e074ac446a638cdd76ae1e8357358ed0c8ac0c8b4275eb5bee7ae60c54958983b9ee6e7c971fcda3084ceb1b1a01d2706fb1670275baef5a5870f9283e354cb16bacb9b8890856333b053e1c45351cc65283384987fffc1401950aed38c531ba45f83c4f445cf1a7a21d2f50e7f9efe7017b2cd8a09fd8499f7350adf1cbf171a01bb0a840b798017d3c329f29d44496cc937800b2fe0eab67199a432445a19ed98ca8a1c4964573223bd4c15dee85039a661a6f796902343551b4da9e44364458340906a085e22d550933572517568ee677d0fb4980dd794b1a7313961d67ff0ca08964163a9a30321d5e9b82ec39eb4e382137d45facda4a2806152ea699356321156873d19ff5d4ceab0b94b62bee8f574bc089298a349ebb211fc5556a68880ccced2cf0b4722b0c6c963a9bfe810fc13ecef798a1f6dffc7251ad20635d6af4f4d48ea33f4f55e064709321756b2159ad172ad00941ddaf4408e37313b1c32503481ab360b92308beb049497f5622426fbecd18d8d1face7f3460154fd59d8a8e06b3dc50d7f2c64c0a8b50c9aea1b95a2be94f20ad5d12300dc70ea07fcf66c4213ee9a81104ef161522b5a191d7ea0c64d335fb4c80790a1ccd48efc680d29e57ccfe6dfb01c0e03a85337615d560bc1cffbbf9c36d6818189b3426c8efd482748d25d25ee96f7151506b40431af37e2514a7fb16f1d9e4da4c31bf141a39b41a422ff4336d64748bc5ea5f1bfbc94fb0e950a8e7bbcb9d427578b02b64aea9e0c45def271dff8afbc4a723d32538327c87f45f95999b01be42bb2ad885660bf89c815ee1306f28cb4d1bda3c71f1d92e49a06ebd3d6694e73ca9d855dfcdae078ab7bd8fffec32ab3e6253ec6ddfa055cdf60f4f3409051355c2cd294480cef6ce8acbd11ee5e989464295af86f48d03c19326a958ebfe8a3fd802355b6b71d3343f825ba29b3e7532d3d5030307a04c213afdb9b60fcc5eda546ff78a043950b1c4edad59afd9e206ad3ff141adab4ef7a547fd7e627ee1f676b526319618fcd487bd76ff9ff731fcefcaf35c67e545729bc1496883a2a5a701fa29cfc39542cb5a1b2d52d69b32c8d145498a24a92d8344643995123f02cffc2ea74004dff036cb8e0de0ff22c259cbf7a6934599e361a1d72a41910311193ca62083be9c48a7122491b2e83684aa7ca66900a69de058396b990936744771d6414d6d875a4d0fe9a6338bd862299d589857ad2b9e272104fc4c3b110bf7f0a8dadbf92accdd5672782a4b909f4fbf4453dcfa734fb69f70819bdd813786b9a9aff0a48bd91ba700e28c89bd6c81abb533339ef882acb33d81500af69421f85695a828164fbb0f81f420c264c0159859ba9249e9b2f6699a96d86bd8d44a075682cd8bdfb46f1b487d3ac3ba6cfa32c02566ef8bb2024bf5251a992f9dce30ad5f9a5a2089143f2aacd6288ea8c55b5893c213dc286878c6a69b965cf3588ba8a7c62c188c661be14f75fa755cc446461204180c21cfac308efb65f907be068084d78b25ca171933f0b089b2f2637c597fb113f1d3b0f0a239266ba7c282c65990b092c4b0d0105c7cd90d7dc23a21c0e24d06ad4833ada8c1520f192ae7925d83fd06570c5285103c1a3bc61cc0af148bf0142b9744c1a61801c55d5ed1fada2cd932f67bec47ee51c20af65c749283e611f28daa12bc05ce1fe32ea4a93b841b13013cf00d6460cd714c3d91d2844c32f377d86c0db11ec12829d78825e86572ff2308e08181257ba5be55622a9cacf619c218d375f231f1d626b244acd2450570d2616ee631ce50d7a5d7a4d09205a052920a7caa5f2cd452e5f4ed7329cb402dd64d2cea3d6664004b704efa05bba9e973d767741b63eecde86957534b0b6c539a3108f65759a78e8b6d3b049dd173e14f606b4cb2ea7d69443c68a96576834f84b934af1b0bcf8c0cf6da8b540ba32ae53be24424748601eb4c80923650783241e69d8eff3bb6b24121db84a39a041742904a6df45c4a7dbb4ee725fd45350fbea0744e66f637dafa0be1f95ea1333d8fd0e6c425b3876af87f4dce5ae3c143a94cdaba0c624949f855584201c3ebc83e9f64211250bcf8924835928b5f283c1e34a5b28039491cc8c917376a3c426d6262cf700212c15936f5ec1bd43cadaa959b247a76d4ce8b939343e05215789469551e2223c32e5bde49f9ad2737add868e1c57c3c434da6c7a60a85dcd45d8a1799439684d44edfd92fca4640988925b9283672bc889ea27845639a2360625bef5c3344fb8c6430ae292b6ba1fd6bde01d884aa676fb0a5e7ed01b3f20938971bbd11bd65b1a765d8f05f6633fbd1df3361a20e2573fa80774800c6d85864904e63b639bf8e271cbb58dfd20538719f3d1cb753a1f51cc430ada2638f7d0658f1826164e0901c9372cc8ea852ff51d5f230b0f720928c84e8cab96f8f4d30d7f0e1708862cdc44853233cfaaf85b0e21f3af1e9314e7af8ceaf08e4a7075f4c57b5796768a83b1e7a279b120197157563de5f076e53d4cc4f836a8eafba4e90284fbde07044f4a1aa383c7f647d2889d169627292f1346a99701c7df96a2b25a0d4ff768b0d7b777e5fcbe2eb4fc38092f81ad4cc008a0d354b4a56f346a24b3e9cae28b4be6ec564ccf245df28d144bd4e4275134c641a0852f9bd7152500de87e82d3c74bc2a6aac5602b8f42270ed448a75f23c9b1e2e627ea6511ede545a69ad5bd621431d2f9deab4bc244abfec1476a0d93570cb279e66d7da38919b0ffa8596a3e2f5e6100994707da02cc9b0236217c70a01c299a5d47d2b4061a3701e484d57bb69477d1695cffcff78f72ce9e607fb41980056a3ea7e084a39d037269a8f6457bcc2637a5d50629ec070dfccbf3d06d9073351a5c10f9b344d495564aa284caf5cedd4b9d41c562710de7dd0309ba42c98efd06f28a3e3340356729358a74d34ff9d6a2cf0297dd11964"}]}, @typed={0x14, 0x51, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}, 0x1054}, {&(0x7f0000002240)={0x2380, 0x20, 0x702, 0x70bd2b, 0x25dfdbff, "", [@nested={0x2370, 0x3b, [@typed={0xd0, 0x21, @binary="54b3d0fecdc3e9827df2c2362a99b02a07e3afd9b039e6ddd1d924600c6ba186d68cebc34909b4b049c559a0787badb95521f7b1f672b897442b0d9fec5464e125d49011299d84823f3972e1815f519f9b38bce85d55d98b3e2aa5966371bcfe23035582487cde674c8100deb363b6e4a10bd190632da1039cd4aeb62400cd3da195483303508905e20d4708a33f5f198f473f9051ad6d60741c317478aa79804fcd10293590ed95d8b6c880701e21043ed29b3f43244a21b2ecbc34e48b875bba3a9af3c5dfdfec3cde"}, @generic="2946bdba798dd34a311144269e670cc59a9446da016d8d2312987a453876a0224d43a853811c183d19ea40c4e03677cac21a2707fe97b1044db9dff2485bca29c60ea1898368cc36d6f36b2fc9b3cad6fded65d0761819fe6423b1bf5d240a4c62b771ab337f79d795dd99d89bf91fe11900dc552c371cb2d4f9a0c4819fc9c95700bbe4ddc9b38217e10ff731750e00afc1d045ed569a3cb7bf87e6144ce8b4930fa6b2df27a0423591550826b7", @generic="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", @generic="3ad8d2a8721ff0dd07a2a01e03507868358bc98a2f70bd269b8abe05e916f981bc5e3721d7c75ab0126929dc437a53bd2452a834341a6cd4e89b4868ca49cedafd08b3563303d4d29d848221eb6c624bf7447839d6af949388c2a21f60776e7113b64134538f83619157a7bb95c3153e8432149bfbec271579854c2157bd91cea07f0812b1367fc7f861f684ce52b547e2b8c7a781082cb9e08d7c443e4c48182f30142effccf8c8c2ad07a1a4b425f728b9fa3b39cc61e36cf50c4985bb148c1b5232b63c673c3ae43fed902c26e8a8d70ab7c724b26b908989ebca8e07187699", @generic="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", @generic="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", @typed={0x10, 0xc, @str='/dev/uinput\x00'}, @generic]}]}, 0x2380}, {&(0x7f00000045c0)={0x12c, 0x25, 0x224, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x114, 0x7b, [@generic="500c40af3d3cef8cc65f3290e5480ff6d1adf6125080d64a43d82f59afb293b48a9af665e2ea744cff0da5a5bbf048d80f73833d3e9be477fb90cce259421f72", @typed={0x8, 0x56, @uid=r3}, @generic="adf896533b0f5f96fb85cb2312473c20be745e420446b568af0c88e3822689a374f3b67b63c68e4d19fd6d5b6d6e463a98e9931d2f203d8cfe93fa5614b1cfb14afd032145d61477be076662268d446359afee4f6790464c8b22e9680e381e59f049052ef9663fed679a09cd", @generic="48c4f218267d1c37f7e625d3279a00c7f20c03a9ce1497f71d79480d6b17d22d1d3453d51c939d2eb717321bdbdc0dfaf058cdfea55c5fc17be20f7f3c4643881fcbc0da96238f79d2c768724b2eab04903c7e", @typed={0x8, 0x8e, @pid=r4}]}, @typed={0x8, 0x74, @u32=0x8}]}, 0x12c}], 0x7, &(0x7f0000004ac0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc8, 0x4000004}, 0x40000) 23:45:16 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x6, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:16 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x9000000, 0x4}, 0x2c) 23:45:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x6800, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 261.753061] input: syz1 as /devices/virtual/input/input241 23:45:16 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x12000000, 0x4}, 0x2c) 23:45:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) [ 261.787724] audit: type=1326 audit(1538869516.937:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11908 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:45:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xa300, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x1400, 0x4}, 0x2c) [ 262.499867] audit: type=1326 audit(1538869517.657:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11908 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 23:45:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x4000}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) 23:45:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xe501, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 23:45:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x7, 0x4}, 0x2c) 23:45:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:45:17 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0xffffff1f, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x7c00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x9, 0x4}, 0x2c) [ 262.603299] input: syz1 as /devices/virtual/input/input243 23:45:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) pread64(r0, &(0x7f00000000c0)=""/39, 0x128, 0x0) [ 262.661792] input: syz1 as /devices/virtual/input/input244 23:45:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0xda00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 23:45:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x6, 0x4}, 0x2c) 23:45:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000011c0)="0f01bb00500000b9800000c00f3235000100000f3065420f20972666770c46f40f01dfc46169e0f967450f3805e50fe1bc7209000000f4", 0x37}], 0x1, 0x0, &(0x7f0000000380), 0x1000000000000065) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 23:45:17 executing program 0: clone(0x200, &(0x7f00000005c0), &(0x7f0000000000), &(0x7f0000000580), &(0x7f0000000240)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x9d, &(0x7f00000b3000)=[{0x6}]}) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 23:45:17 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4304, 0x20000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000c40)=""/4096, 0x1000}, &(0x7f00000000c0), 0x40}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) write$uinput_user_dev(r1, &(0x7f00000007c0)={'syz0\x00', {0x1, 0x197, 0x3ff, 0xfffffffffffffffa}, 0x4b, [0xfffffffffffffeff, 0x1, 0x2, 0x7f, 0x1f, 0x4, 0x5, 0x7f, 0x5, 0x1ea0, 0xfe, 0x5, 0x200, 0x1, 0x400, 0x7fff, 0x1, 0x4, 0x5, 0x7, 0xfffffffffffffff8, 0x1, 0x7, 0x744d, 0x7f, 0xffffffffffffff4f, 0xffffffff, 0x2, 0xeb, 0x9, 0x2, 0x1, 0x9774, 0x7f, 0x1c00000000000000, 0xfffffffffffffff7, 0x100000000000, 0x409, 0x1, 0xffff, 0x5, 0x80, 0x80000001, 0x5b42, 0x8, 0x1, 0x1, 0xfffffffffffffeff, 0x7, 0x6, 0x6, 0x4, 0x800, 0x8, 0x400, 0x4d, 0x3f, 0x9364, 0x6, 0x4, 0x2, 0x2, 0x0, 0x100000000], [0x6, 0x3f, 0x7ff, 0xfffffffffffffffc, 0x9, 0x98, 0x3, 0x7, 0x9, 0x4, 0x0, 0x4, 0x6be437ce, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x2, 0x80000000, 0x3, 0x1, 0x7, 0x1000, 0xeb7, 0x6, 0x6, 0x8001, 0x8000, 0x80000000, 0x7, 0x9, 0x4, 0x100, 0x1, 0x10001, 0x4, 0x964, 0x1, 0x8, 0x6, 0x2, 0x6, 0x0, 0x6, 0x800, 0xe821, 0x8001, 0x5, 0x1, 0x5, 0x3, 0x3, 0x4, 0xe1f, 0x5, 0x8c, 0x0, 0x0, 0x7, 0x1, 0x3, 0x4, 0x5, 0x40], [0x6, 0x5, 0x8, 0x4, 0x1f, 0x3ff, 0xff, 0xa40, 0x200000, 0xd8, 0x8, 0x2c3f, 0x8, 0x2, 0xffffffff, 0x8, 0xea6c, 0x200, 0xbdc, 0x7, 0x8001, 0xdf, 0x4, 0x9, 0x1, 0x6, 0x9, 0x1, 0x5, 0x0, 0x9, 0x7, 0x35, 0x9, 0x1, 0x1000, 0x1, 0x36a0, 0x8, 0xfff, 0xcbd1, 0x2, 0x100000000, 0x0, 0x9, 0x8, 0xfcc, 0x5, 0x5, 0x7, 0x0, 0x1, 0x36d8, 0xbe5, 0x20, 0x4, 0xfffffffffffff800, 0x50, 0xffffffff, 0x6, 0x71, 0x3, 0x7, 0x80], [0x40000000000000, 0x7ff, 0x9, 0x0, 0x9, 0x207, 0x9, 0x1ff, 0x4, 0x7, 0x101, 0x0, 0x9, 0xcc, 0x9, 0x6, 0x0, 0x3, 0x8000, 0x1, 0x1, 0x66, 0x1, 0x280000000, 0x6b2122cd, 0x6, 0x7, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x8000, 0x101, 0x6, 0x100000001, 0x401, 0x4, 0x66a1, 0x9, 0x11fe00000000000, 0x9, 0x5, 0x0, 0x4, 0x0, 0x3, 0x1, 0xfffffffffffffffb, 0x6, 0x0, 0x3, 0xb131, 0x100, 0x9, 0x800, 0x8, 0x0, 0x7, 0x0, 0x80000000, 0x101, 0x9, 0x300000, 0x2, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:45:18 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0xa000000, 0x4}, 0x2c) 23:45:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x8f00, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) [ 262.875264] WARNING: CPU: 0 PID: 12012 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 [ 262.883458] Kernel panic - not syncing: panic_on_warn set ... [ 262.883458] [ 262.890857] CPU: 0 PID: 12012 Comm: syz-executor3 Not tainted 4.19.0-rc6+ #271 [ 262.898231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.907600] Call Trace: [ 262.910481] dump_stack+0x1c4/0x2b4 [ 262.911640] kobject: 'loop5' (00000000727fba3b): kobject_uevent_env [ 262.914136] ? dump_stack_print_info.cold.2+0x52/0x52 [ 262.925037] kobject: 'loop5' (00000000727fba3b): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 262.925706] panic+0x238/0x4e7 [ 262.938406] ? add_taint.cold.5+0x16/0x16 [ 262.942569] ? __warn.cold.8+0x148/0x1ba [ 262.946629] ? kmalloc_slab+0x56/0x70 [ 262.950424] __warn.cold.8+0x163/0x1ba [ 262.954308] ? kmalloc_slab+0x56/0x70 [ 262.958125] report_bug+0x254/0x2d0 [ 262.961744] do_error_trap+0x1fc/0x4d0 [ 262.965621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.971148] ? math_error+0x3f0/0x3f0 [ 262.974943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.979774] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.984786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.989618] do_invalid_op+0x1b/0x20 [ 262.993407] invalid_op+0x14/0x20 [ 262.996851] RIP: 0010:kmalloc_slab+0x56/0x70 [ 263.001247] Code: c5 60 ab 00 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 80 aa 00 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 a0 aa 00 89 5d c3 66 90 66 2e 0f 1f 84 00 [ 263.020138] RSP: 0018:ffff8801d256f978 EFLAGS: 00010246 [ 263.025494] RAX: 0000000000000000 RBX: 00000000ffffff00 RCX: ffffc90007ea6000 [ 263.032751] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000003fffffc020 [ 263.040013] RBP: ffff8801d256f978 R08: ffff88018ca04380 R09: ffffed00397b2001 [ 263.047281] R10: ffff8801d256fa48 R11: ffff8801cbd9000f R12: 0000000000000000 [ 263.054537] R13: 0000000000000000 R14: ffff8801cf3d04c0 R15: 00000000006080c0 [ 263.061812] __kmalloc+0x25/0x760 [ 263.065258] ? input_mt_init_slots+0xe5/0x4a0 [ 263.069742] input_mt_init_slots+0xe5/0x4a0 [ 263.074057] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 263.079977] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 263.085335] ? __fget+0x4d1/0x740 [ 263.088776] ? ksys_dup3+0x680/0x680 [ 263.092480] ? __might_fault+0x12b/0x1e0 [ 263.096531] ? lock_downgrade+0x900/0x900 [ 263.100666] uinput_ioctl+0x4c/0x60 [ 263.104282] ? uinput_compat_ioctl+0x90/0x90 [ 263.108673] do_vfs_ioctl+0x1de/0x1720 [ 263.112552] ? ioctl_preallocate+0x300/0x300 [ 263.116960] ? __fget_light+0x2e9/0x430 [ 263.120932] ? fget_raw+0x20/0x20 [ 263.124372] ? _copy_to_user+0xc8/0x110 [ 263.128338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.133866] ? put_timespec64+0x10f/0x1b0 [ 263.138005] ? nsecs_to_jiffies+0x30/0x30 [ 263.142145] ? security_file_ioctl+0x94/0xc0 [ 263.146547] ksys_ioctl+0xa9/0xd0 [ 263.150006] __x64_sys_ioctl+0x73/0xb0 [ 263.153898] do_syscall_64+0x1b9/0x820 [ 263.157785] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 263.163142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.168060] ? trace_hardirqs_on_caller+0x310/0x310 [ 263.173086] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 263.178096] ? recalc_sigpending_tsk+0x180/0x180 [ 263.182839] ? kasan_check_write+0x14/0x20 [ 263.187065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.191904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.197104] RIP: 0033:0x457579 [ 263.200286] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.222133] RSP: 002b:00007f0d7a145c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.229831] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457579 [ 263.237095] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 263.244359] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 263.251633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d7a1466d4 [ 263.258895] R13: 00000000004c1284 R14: 00000000004d1e78 R15: 00000000ffffffff [ 263.267267] Kernel Offset: disabled [ 263.270893] Rebooting in 86400 seconds..