ite$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 20:08:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x0, 0x61}, 0xfe4f) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [], [0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) r3 = socket$netlink(0x10, 0x3, 0x13) dup2(r0, r3) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e23, @broadcast}}) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:07 executing program 5: openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x7ff, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) socket(0x10, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) accept$inet6(r7, &(0x7f0000000300), &(0x7f0000000340)=0x1c) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000002c0)=0x8) chown(&(0x7f00000001c0)='./file0\x00', r10, 0x0) setreuid(r10, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) pidfd_open(0x0, 0x0) epoll_create1(0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x414400, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000001c0)={0xfffffe82, {{0xa, 0x0, 0x7, @empty, 0x200}}}, 0x1f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) 20:08:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) open$dir(0x0, 0x80000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket$inet6(0xa, 0x100000003, 0x1f) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0xfffffffffffffe59) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x8, 0x70bd26}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x400, 0x0, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) write$smack_current(r5, &(0x7f00000001c0)='-(&\'wlan1selinuxppp0keyring\x00', 0x1c) r6 = socket$packet(0x11, 0xa, 0x300) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) [ 185.591167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 185.655537] ip6_tunnel: “ xmit: Local address not yet configured! [ 185.669863] input: syz1 as /devices/virtual/input/input173 [ 185.676864] ip6_tunnel: “ xmit: Local address not yet configured! [ 185.677717] ip6_tunnel: “ xmit: Local address not yet configured! 20:08:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x4000003, 0xc0e) fallocate(r2, 0x0, 0x0, 0x7fff) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0xfffffffffffffffe) syncfs(r4) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x61) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x4d62]}, 0x45c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa090], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) dup2(r6, r5) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r7, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r7}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000240)}, 0x0) [ 185.698469] input: syz1 as /devices/virtual/input/input174 [ 185.826930] ip6_tunnel: “ xmit: Local address not yet configured! 20:08:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000400)={0x30, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff83, 0x2, 0x1, 0xfffffffd, 0x3, 0x0, 0x4, 0x4}, 0x0) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000100)={0x2f}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2b212bad36319c0ccca1a65174c16f6d936fd61eb0b9504553bcfeb0241320e6cb286b23873428cf325f394ec1728e2b893603bbb7e6b67d12a89007d442c2a8ad5b3e7d1af21dd5bac6ba974bd375561245aeed96d42731215671a2080b0f1e3bac6b9a9f5a671c44ba6606b8c91fd72a6f1fb44d627aaaca7b8616ea753509a14d26a86e6e1e36f36843fbbd7d4eee6805be7190fab6aee84f5dc6a6721c7a101d48fa7ff69b5418c792490da4301f6a"], 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000802}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x200480a1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r9}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x61) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r10}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r10, 0x4004556b, 0x61) write$uinput_user_dev(r10, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) write$input_event(r10, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r11}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r11, 0x4004556b, 0x61) write$uinput_user_dev(r11, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r11, 0x5501, 0x0) write$input_event(r11, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES64=r6, @ANYRESHEX=r7, @ANYRES16=r8, @ANYRES64=r9, @ANYPTR64, @ANYRESHEX=r3, @ANYRES64=r11]], 0x8}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x200, 0x2, 0x8, 0x3f}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xba, @remote, 0x120}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 185.971561] input: syz1 as /devices/virtual/input/input178 [ 186.068538] ip6_tunnel: “ xmit: Local address not yet configured! 20:08:08 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x49, 0x29, 0x0, {0x0, [{{0x0, 0x2, 0x6}, 0x0, 0x3, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:08:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000001c0)={0x3f, 0x7, 0x3}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x510, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x4200, 0x44199e26101b4f37) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000240)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) 20:08:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0xc6bb20948d3cacb8, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x8, 0x70bd26}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x90402218}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4c800) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) creat(0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) write$binfmt_elf64(r1, &(0x7f0000001640)=ANY=[], 0xf5aab446) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f00000003c0)={0x4, 0x12b4, 0x8}) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000380)) 20:08:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 186.443457] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 20:08:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) syz_open_procfs(0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0xfffffffffffffe81) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x12, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r4) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0xff53) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x40) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$inet(0x2, 0x815, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 186.576014] input: syz1 as /devices/virtual/input/input180 [ 186.594488] input: syz1 as /devices/virtual/input/input181 [ 186.643911] ip6_tunnel: “ xmit: Local address not yet configured! [ 186.650905] ip6_tunnel: “ xmit: Local address not yet configured! [ 186.666892] ip6_tunnel: “ xmit: Local address not yet configured! 20:08:08 executing program 1: openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80003, 0xff) fcntl$lock(r2, 0x7, &(0x7f0000000600)={0x2}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000540), 0x1000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000540), 0x1000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r6, r5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000680)) setfsuid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xffffffffffffffed) setfsuid(r7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xffffffffffffffed) setfsuid(r8) mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='fuse\x00', 0x1000000, &(0x7f0000001840)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fowner_gt={'fowner>', r7}}, {@fowner_eq={'fowner'}}, {@euid_gt={'euid>', r7}}, {@fowner_gt={'fowner>', r8}}, {@seclabel='seclabel'}, {@hash='hash'}]}}) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x1, 0x1f, 0x2}, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[@ANYBLOB="0002000000000000040155171e4ad0d7611d4205c769e400c910ff01040d00000000b379f26337296b0b000000622db173ca9a173af8b0b259e5dbee0e8712a7ac3658c1007e6b9036229e10f692bea8ca246f273ad6e18f2e95340a1b146f86c396ed7d8938d6466e48ba9fe7d2ed6dbb02fb07062411615dc47918429b1b829e69bd2c0200000079fbdb43eed3d1ffc2b373ecce659bb707915332e9e27b3f00b519a60000000019d47e6902f4c881c43c0cef5679a939bbb0191771ee087618c1079460001ec73af1216cf96ff90dce27875cb003ce18c465a134f59310f254905fe6ba63ae9c2dcb5e551989c2768a839e008684a42ebeb1953d47f93cc0a72b50516c4506018ba05fc52d237ead224d354d1f583744dcb174ec140187b1abd1e2e0d1729365b7a1000000000000000612b62cf5a671cefec3ed31c78148b38e4ddc89deb8c810bbc734cc03f671b102b2d003004c50d0c4a2c4d5bedca9ad39bdbac54993fb232fd0cc9affe9bd34b2b9339fc8e9a5e5e5180a35499f475149c576cd0a86f63acbe360c133003feb2c55109a1ba3e187cfbc3a1e808bd4bc0191e1828f8676243b95080000000157b7359767a28fcaecaadbc0377b8f94ef2fad9908820abe9763b43cd1ce02ad8f559e3287c2ce165659c151ee77f223d884fb43636a33fcdc20fe47fcbf7944bb7778de75291920c651e167b601d43c20c92447bb553700fa4abd362a6d48271fc20000004000000000000000000000000000000000000000000000a98d82f383b489a0abcc9349d0fd217e4c3df0d587aa48121ea26ccf5f18e59a2a9b873687f77a46dc1eca11b744d702ad10cd84906794f2506979fe4c8d4bcaa78d71537904d8c9ee577797b112e2addd3a896478b7c606a4b0fac1fbb41a48e8c274f376440b3a60a8b0d39ee68b26ccdafc470a3bb9e895d670f61a7acc9d4cab8a5d98684dd0872ab8137897a312eea63e48057764f6eda8a56c698c4bd6b38e2d197f6dfd88a8c69593789f09acd3c6c2b71d718ce67f1de924d23f262bf131a73a6d774391e6c97a1ecc03d0d8add098aba3312e8389709f00f386ca2a"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 20:08:08 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r0 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0xffffffffffffff48, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = creat(0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000280)={0x0, 0x7ff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) socket(0x0, 0x0, 0x0) truncate(0x0, 0x0) [ 186.977994] ip6_tunnel: “ xmit: Local address not yet configured! 20:08:08 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x4c9}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@RTM_GETNSID={0x34, 0x5a, 0xd3fb7526571906e1, 0x70bd2b, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}]}, 0x34}}, 0x20000000) 20:08:09 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000040)="f9", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/inpu\xfc/mice\x00', 0x0, 0x8005) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'bond0\x00', {0x2, 0x4e21, @remote}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 20:08:09 executing program 3: setrlimit(0x2, &(0x7f0000000000)) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") 20:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 187.374617] mmap: syz-executor.3 (8964): VmData 18530304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 187.447756] input: syz1 as /devices/virtual/input/input182 20:08:09 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000200)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) pipe(0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x1, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @local}, 0x1c) dup(0xffffffffffffffff) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r10, 0x4c80, r12) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r12) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r12) r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r13, 0x4c80, 0x0) r14 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r14, 0xc0502100, &(0x7f0000000480)) r15 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000000240)=""/34) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x400c010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 20:08:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000803, 0x0) accept(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000140)=0x80) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) 20:08:09 executing program 5: set_thread_area(&(0x7f0000000000)={0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x440040) write$UHID_CREATE(r0, &(0x7f0000000440)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000280)=""/208, 0xd0, 0x347, 0x4, 0xf64, 0x4, 0x6}, 0x120) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0xbfdc, 0x1000000, 0x5, 0x3, 0x8146}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r1, r1, 0x0, 0x8800000) r2 = socket$inet(0x10, 0x80000, 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000186dd0610000fffffffffffff0000060000000000000000000000000100000000000000000000000000008000ffffe0000002"], &(0x7f0000000580)={0x1, 0x2, [0x75, 0x1e0, 0xc36, 0xbb2]}) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f0000000600)=""/8) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000200007041dfffd946f6105000200000a1f0000020028080008001000e9110300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 20:08:09 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() epoll_create1(0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000880)=0x0) sched_setattr(r2, &(0x7f0000000940)={0x1012f, 0x6, 0x0, 0x1, 0x20, 0x0, 0x2}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x0, 0x2001, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) signalfd4(r5, &(0x7f00000002c0)={0x62}, 0x8, 0x800) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendfile(r6, r6, 0x0, 0x2008000fffffffe) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0xffb6ac351d9db5d, 0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000480)) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) r10 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xfffffffffffffecb) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB="2c616c6c6f776c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c6d61785f726561643d3078303030303030303030303031303030302c616c6c6f775f6f746865722c64656661756c745ff0e6e0c88cade37065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030373030303030302c626c6b73697a653d3078396562663937323563303265643263322c616c6c6f775f6f746865722c636f6e746578743d757365725f752c646566636f6e746578743d73746166665f752c736d61636b6673686174", @ANYRESDEC=r10, @ANYBLOB=',uid=', @ANYRESDEC=r11, @ANYBLOB=',audit,\x00']) timer_settime(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) [ 187.771170] devpts: called with bogus options 20:08:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xd0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x14}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x0, r6}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="ffd9531c1969fc15009c5b7213f6012f66b000000000e00700ffffffff6b6f00000062c3a119ff2f9374f021566ecabd3d9ca9d6171079c1998bfe5d315f368500ec07a31300000000005d78df18f57a8ac75f3e9ca77b4db77b74412c65365d3d4564fca87164b1b9d50b219f1dc723214baf9d36b8b2"], 0x77) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x59080280}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r8, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x80}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x81) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x50, r8, 0x106, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4028805}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="c6e39478dea19ff8640cd7a51b3cd3d9"}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 20:08:09 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000200)={0x0, 0x7d, "9a398a933c58b324bce4315eb882ba85928f473e87b0355d91be3112bd0cf29abaea1629a144c0a6993402b8c335c926ecefa655c0a4a96d9639d899984e8fecd4b6c2fd7fe1648cd09f381c92a7fce7d90c63c76d93fef070f25ac6d2e661a31c3c486f8bf23c7af126cfaf2d72b05282f0a174fa62962f4b813474b0"}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r7 = getpgrp(0xffffffffffffffff) write$P9_RGETLOCK(r6, &(0x7f0000000340)={0x35, 0x37, 0x2, {0x1, 0x9, 0xab1c, r7, 0x17, 'cgroup.subtree_control\x00'}}, 0x35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000100)="97043e52fa044c7ece91979c180e054ac4d63e3a5020af17bb8e2d05bc68b2ee09038897150e51eca44919dd7c6558fbc3833a7f0e69868bfa3139c448928912d39f4a06a3d92bac04fb717598264ca20228ca80b433ac204beff9a93cffdb850107cf8931acb399b09d908dd78c18f9d3a5f0d7ba71a282a3bd4cdda8d9080fed19249169e0af69573635709264ad", 0x8f) 20:08:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0xa}, {0x3, 0x4}, {0x5, 0x1}, {0x10, 0x3}]}]}, {0x0, [0x18, 0x60, 0x9311673d6019d8f4]}}, &(0x7f0000000680)=""/216, 0x51, 0xd8}, 0x20) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r8, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r9}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x61) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r10, 0x4c80, r12) r13 = ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) r14 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000004340)='/selinux/access\x00', 0x2, 0x0) r15 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004380)='/selinux/checkreqprot\x00', 0x101001, 0x0) r16 = signalfd(0xffffffffffffffff, &(0x7f00000043c0)={0xffffffffffffff6d}, 0x8) r17 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r17, 0xc0502100, &(0x7f0000000480)) r18 = accept4$packet(r17, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004440)=0x14, 0x800) r19 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r19}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r19, 0x4004556b, 0x61) write$uinput_user_dev(r19, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r19, 0x5501, 0x0) write$input_event(r19, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000004480)={0x0, 0x0}) r21 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r22 = gettid() fcntl$setownex(r21, 0xf, &(0x7f0000000280)={0x0, r22}) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000004500)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000004600)=0xe8) r24 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r26, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r26, r27) getgroups(0x4, &(0x7f00000002c0)=[0x0, r24, 0x0, r27]) r28 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r28}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r28, 0x4004556b, 0x61) write$uinput_user_dev(r28, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r28, 0x5501, 0x0) write$input_event(r28, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r29 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r29}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r29, 0x4004556b, 0x61) write$uinput_user_dev(r29, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r29, 0x5501, 0x0) write$input_event(r29, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r30 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r30}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r30, 0x4004556b, 0x61) write$uinput_user_dev(r30, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r30, 0x5501, 0x0) write$input_event(r30, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r31 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r31}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r31, 0x4004556b, 0x61) write$uinput_user_dev(r31, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r31, 0x5501, 0x0) write$input_event(r31, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r32 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r32}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r32, 0x4004556b, 0x61) write$uinput_user_dev(r32, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r32, 0x5501, 0x0) write$input_event(r32, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r33 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r33}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r33, 0x4004556b, 0x61) write$uinput_user_dev(r33, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r33, 0x5501, 0x0) write$input_event(r33, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r34 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r34}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r34, 0x4004556b, 0x61) write$uinput_user_dev(r34, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r34, 0x5501, 0x0) write$input_event(r34, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r35 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r35}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r35, 0x4004556b, 0x61) write$uinput_user_dev(r35, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r35, 0x5501, 0x0) write$input_event(r35, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r36 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r36}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r36, 0x4004556b, 0x61) write$uinput_user_dev(r36, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r36, 0x5501, 0x0) write$input_event(r36, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendmsg$netlink(r2, &(0x7f0000004740)={0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000007c0)={0x10f0, 0x2c, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4a, @str='\x00'}, @nested={0x10d0, 0x7, [@generic="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", @typed={0x8, 0x85, @ipv4=@remote}, @generic="7a2cb41c9716f82500bd384f7c96f1d26a329d6ed99c86678a2fbc4c05e8e86e7ab899697e0c65e3f86d9e4528c3bc5d3c19b7acb532559e26d9b1027ee3796186c637f8adee3042b255a1c9ed04b811bad8b66e79eeca8395900d6fb70273d4e7fae2ec74310a3afddee086d5fb4db414b8", @generic="9e00878f5e4da732b5b5b049c991b062ee0a25fbbb04ba49359d4cf08e76f42547ef36e803c6e82e27b3b1929fd0e1fb2d87e81b27047405562f94c0568754f6c55f203299ab1c613466260c0df29c"]}, @typed={0x8, 0x80, @fd=r0}]}, 0x10f0}, {&(0x7f00000003c0)={0x2a4, 0x22, 0x5384f1246979a67d, 0x70bd27, 0x25dfdbff, "", [@generic="86dcb0a3147800c911d80aea7be238f9b9eb8801b0ef0c806ac6ca3b23c61e1926bd4d087b14e11daf1269c74021933174850839454e65c6ba8b3e9a86638f699bf407f353a7788b9c99ee2e8330e54f8f8dbe844cd5f6415587fe222e66d0cee606b420ab08de5db8fe13f759520a32ceeb1dfa4ace8173fe4559f0817fa0f5a9224ba04484b56ddbff72807ddc7e396cfa018a96d5cd066e", @typed={0x40, 0x10, @str='\\@vmnet0securityppp0posix_acl_access-}selfcgroupeth1{)@self\x00'}, @generic="74fa30609b2cc739386cb6889be3af70a5eed1a36b11772f", @generic="6f1b247662c1a086063b1e3596678e5383782023357d93ed9d362c056af67e60cd24ed0ddb479f97b96c45ae0fab18978026bcbbd7902c2c36f219c4fc99dd39fa70b4469596abbe51d57add9b636c470d4d36ceacb6abf7f2a64f8bf883831df8c39ea324f6bf25b71990604ea922471e0c7e6c866da1e0fc82029eca19d0089b95087aaae82cbd3ccf3dc4ba81b159b12f4a4a42d9f0fa588e13a15805287c220c2027363ddb19", @typed={0xf8, 0x7a, @binary="e680045bc733399e40595b0baaa46d8ecec61694ad424ae342ea57d3435279835f3be138767323529256de7a335a5b116390e969a865fb97bba97c4276e8b514b4cd2543faf14b8fb5435d68728d552de40df2de60195f36be1f6c5fab3604539e16733326d71c1a631d4fa97b87ec267965115443258b22cbca17b1fa78404e41426eaba5ac095087c6c96bf03226ce99503157cdb8be159dd38c447d4222d88bd81387ba8119c6096b928a0f8cd3b96cfd93447dcf57f2a070844c2ed1ce891e062eb8dea3a291113eb5a2b2e5d6b98f4c8bbb07bad00b19dffaedb8adfed0bacb7c5d31c2d8760908e778133d6de4d1a6685a"}]}, 0x2a4}, {&(0x7f00000018c0)={0x1a4, 0x1f, 0x506, 0x70bd26, 0x25dfdbfb, "", [@generic="c4a8b764e720d048629960442e116ccad188ac6905dfdcd6e299bec497160b4b5633ccdb8e3f0f22d5a367852e907782b1edecbbb789cf2085eb4475a80f98600c13576331bee37eb9ca6d800afcd2b1697793cc60ef92036a033768bee073c97fb7ef305acd559e998c4234177ee2b2bedb7759c23c73ce47d2734288f47d5207d4e196738722d5c2df30ee4b137bfc60a1b884992c5f19c3d8b7b02e97bf15032faf0936ffea317ba9d4c1e81ed151701bdea9d0be9ee825", @nested={0xc, 0x9, [@typed={0x8, 0x53, @u32=0x1}]}, @nested={0x4, 0x46}, @nested={0xc8, 0x32, [@typed={0xc, 0x4a, @u64=0x3}, @generic="5e1e446a8bda443986fd461f50f482d09a3c01c52d4d55446cb2731951d34ecc22614d14de0d18a05d1ac6df6b1ef91cd3ee42f5d93465f53a17cabf932d57765b02196a58a713ee539b65638d1f3a21e2d23cbce49753be8984cf041b420479a2262a475390c104adaf6b62cf1504e2faf308422809778e55cabe9c5ba724dac952c14436fd039423fddd93c0599b73ef2b27e7806dc092612986e65cefe05c02c6a3666582ef2215ee0db873273365f5579b0c5f85f1"]}]}, 0x1a4}, {&(0x7f0000001a80)={0x2588, 0x3f, 0x20, 0x70bd25, 0x25dfdbfc, "", [@generic="780695c669ef3d3afe7c13467b6c361ca1313c953780457f6d79ed434f4c72a9e06c015e80990478172ec11a2a58d779fe0fc44c4744417d2473226a7de6ca973cfcc103da598a29888c803408264f85916d070a814d9ddd2dc9710fcff1166722ad577f5b6700a494ab506e82fbfc2e174872ace851c505693b9401cdc28b51a43adadf4df0b5061f8d8f26653b18d2ce07bddfebbcde8a47fa90b62a2148dcc1d72ca19eb04cffd2e5190ba23652ede0c9e8b1dbf1b65892d1670ca06a19528e55157147882fa7b4f6080558040809391e47690237c03485", @nested={0x20e8, 0x91, [@generic="9ec63256462e10ca882948b1fa4147c0f28d21b0f6c4e6ecba993ae31d6eb28ea7410a2c5c5f0db1160871fdcdf5589c9b4b86b1c12051d625ab5b81301c2d9c36f005deabcc93b01c06fda0419f81048e30a23a77025f3cc4fe19c097cf61346726ee123bc25c488ecf9807c112328a727b06d5e5014e2e5586f4f47ca962657775e10343b697a4bb6f65f0dd72a21dc967809b21320651535b8a87a634bfe964476f0a6ff515d93a53bfd270f52f5cb0e82cb6cb4cdbe46ad1ed8bec1fdb0bac0e1d2b9e2508a856883b0fbb2cf526bd719f8ff5ab1a7e00dd4d1c", @generic="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", @generic="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", @typed={0x8, 0x80, @pid=r5}]}, @generic="e9d9a4cb5a46b4b74ef8a584ced823ac5d320f9848485cf491ac4f072d0d21215cbbbdce2068e33823f8496082391461c411a22c0af737b7b1a450a43ccc1b6f39a164f1ff1ddde8ef50c2a7abcf45c72a27d64b41ec7ef1d3e320c824db3c769a7e9938daebcd1efe984ab1b210819a4bda5509d3f78bd63a4f654120191be09435630d39446c0c77150fa16744477026e4210c0f223dce4e8bccb02fc42d6071070aa7bb8386a65a5ce484e570819f38fb3ac371d1256e81ac7dce8004", @typed={0x4, 0x5e}, @nested={0x270, 0x77, [@generic="ae26a5c08956bae0d7e3cacb97012380b481cd4f52111222d71d4731f79db90b631b339082", @generic="86f7385a812203bd5bba5a7df5cf246097acb4", @typed={0x8, 0x34, @fd=r6}, @typed={0x14, 0x62, @ipv6=@mcast1}, @generic="27bcd72ce81fae9ea2f1b845a6e714af7a42cd37", @typed={0x8, 0x36, @ipv4=@multicast1}, @typed={0x100, 0x60, @binary="468205d7b8e53bb7a6183207d629de810890c782409071e789105b8e078f96a2816af8a455cdc3d13d8217e08ed702061c591ea64f8db47133d472283bd94f260216830cb5f4331a52d69502309adec7586eff675836725858e31eda8739e41a4ad022682eb7732a65a76b4f3dac426e9b402807d8ee3b07c707774961cc0f766ae31f3e320e567157e5f3942b06518f07d7ec0dba3f7dc2fc04979d76236fcbffcf310ba6befdae25040332d0524ae254f0bfeb1965e9dbfa857a03606bfd5630da617592c776619df1d7874706dff6eca094b7722e07d6fc57c660681e3e838d8078f0633272aa815888896f10b7ddf199c6bffcdd1911ea"}, @typed={0xfc, 0x65, @binary="653d8a085754acc0742e015d4a09e7e9491f280c20d8b2275445a5776a4db9c08cafa00179f231ccdf14aeeaf38606506925f406be0b00f4e905fd58ae84ead92264e0ec3dfee7eb0de41e9192fcc5aefba28815cdc8fa624dccd8bf8deefd2e89bd1316493b23afb5dcaaba989b171f757941da4a47acd863ecf6b7a68aced1ab552d01c1feff62f96c658a6b31c460140d566eee1d0bf10669264d59d53528bd9b9a800be75f905f0e57c49d7ef84c9d02154da1ea4584971e5cea2d05b59df112d4c202b7d445f13de0ec64b3d322b1e22a7a90faeb68278bdd683215213727d7021b73245171f43e87ce05868a041592569ba8"}]}, @typed={0x14, 0xf, @ipv6=@loopback}, @generic="81f70ecb556cce47aba5894da2fdc30830bf15de64d52b5534f1145026ce4d18a44c9c55bfe5122fbe62e07c64db88212790d4bd975954d207368193365c8ae1031d300cbf3c942984d00c839685d18bc52faae0f21918d715019d66e1de40bbe6fa013876ab5ac81db57f6f1a2ffba059"]}, 0x2588}, {&(0x7f0000004040)={0xe0, 0x16, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x44, @uid=r8}, @generic="80c414201e7e46bdf5ebe123ceb1266a7a958fc8c724c93d9e43e0467312c6f1618d8cc20999fcc3e07613a7127e77cf40c0339aa546b8d838132cb0558f8a54177f4bf9d21695697da1b5f621c43df2a0d5be47d4235db1255833337ea93390b1795e493e7982b0621615706ce0b2445226cfc93f79fc4344625de585ca7ebc0af3c819a545921310f9b298fe360f9bdd26f85e1d2c0f9c62e7cb1dbd8ebbdd447e0911265e6641fe77bf6c1852c3053fb83d", @typed={0x14, 0x76, @ipv6=@mcast1}]}, 0xe0}, {&(0x7f0000004140)={0x154, 0x2c, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0x10c, 0x4c, [@generic="6643efe36d36a7e90cfd7cb552d53e878e112872bba7253be3a0d2e3eebd6771734c7c286f77f7d00144551de20560b2b834685398cc31f1ddec06ee0409d64169eff015adaacb845cd76c96", @generic="b2499e3374b9ad07a8223f6245c9d81a2a6ef8cdfa0719c35ee3ceca805f578924669d3a2b0c7b001db1d710f6e02f298b22460a81c331c70e2a7d1365a26ceafa528b2aacee07bdd238caeae857b22ddfd9baecc82b79588aa625eed27fb96c1584a80a7d4144a581a1b190d9f675418e6bc5cf0162cee592f9b661a1a251af3d5575f544c81c4469b050b966be5e2322d10a5e157c44f5eee39e8ccffe744ae2049cc2463fa0", @typed={0x14, 0x38, @ipv6=@rand_addr="8052a10ea4587526e7e97a177d3a0f31"}]}, @typed={0x8, 0x1f, @u32=0x1}, @generic="650b18c865faca9fa26a041cc723274f9c4cfc0f8e27c6ff484eee72a99aa05df1b6bc55b13cfced066baf3901fd"]}, 0x154}], 0x6, &(0x7f0000004640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, r13, r14, r0, r0, r15, r16, r18]}}, @rights={{0x18, 0x1, 0x1, [r19, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r20, r23, r27}}}, @rights={{0x2c, 0x1, 0x1, [r28, r29, 0xffffffffffffffff, r30, r1, r31, r0]}}, @rights={{0x30, 0x1, 0x1, [r32, r33, r0, r0, r0, r34, r35, r36]}}], 0xe0, 0x8041}, 0x80) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@isdn={0x22, 0x0, 0x0, 0xff}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)}], 0x1}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f00000001c0)='./file0\x00') r38 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r38, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00003fdff5)={@multicast2, @loopback, @empty}, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r38, 0x6612) r39 = dup(r37) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) write$UHID_INPUT2(r39, &(0x7f0000000280)={0xc, 0x81, "c417ca802c9b0e89a68bc68d0dcb8aee4e503df35d3cdcba5f51e70ef4bea2d86bae543235d3c47dd8c577d9f51643e7644347df5cdd9e257ab342fd3709327084762d4303ed14baa650d4b7a4f684300a850c2256889a3b41bb3cd46f6d00c8acc8ef4d6648f999f89946bfd85132dbd27379c62a626bebe48008ed02e5bb6d57"}, 0x87) r40 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) ioctl$TUNSETOFFLOAD(r40, 0x400454d0, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 20:08:09 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = timerfd_create(0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = memfd_create(0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c463ce402a57ad1b1af58f38d8639baa945b9b202a40da91496000026cbe9b9b6c490b403003e000000100000000020968dd9bee5817a51a1018f400df1ae24bdf14f266dd67d5b120f1d4bd27f242cadc8"], 0x3f) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xce) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(r5, 0x5432, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000440)=@v1={0x0, @adiantum, 0x4, "0000000000000100"}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r6, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) fgetxattr(r6, &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', &(0x7f0000001d00)=""/4096, 0x1000) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) fgetxattr(r7, &(0x7f0000000140)=@random={'user.', 'selinuxbdev\x00'}, &(0x7f0000000380)=""/174, 0xae) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x84003ff) write$eventfd(r3, &(0x7f0000000280)=0xffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x0, @local, 0x1f}}, 0x0, 0x0, 0x0, "30bbe9a78470f1d6562884859d3d21581250a985ab9e45a7f53fe87fd6dc040f7968bb9752242eb7a7a6f318e3fc177d7c894a31fe14035ed68258eec7efd703aeaf50f1fbceea95e691f424d356be9b"}, 0xd8) 20:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 188.281344] input: syz1 as /devices/virtual/input/input183 [ 188.349069] input: syz1 as /devices/virtual/input/input184 [ 188.392010] input: syz1 as /devices/virtual/input/input185 20:08:10 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0xbd, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80, 0x80000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000240)=0x400, 0x4) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x3) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000001600)="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", 0x1000, r3}, 0x68) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) read(r1, &(0x7f0000000600)=""/4096, 0x1000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r5 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000280)) 20:08:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000100)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RFLUSH(r2, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x3, 0x4, 0x8}) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5}, {r6}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000280)={0x0, r8}) connect$unix(r7, &(0x7f0000000340)=@file={0x3, './bus\x00'}, 0x6e) fdatasync(r4) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r11 = gettid() fcntl$setownex(r10, 0xf, &(0x7f0000000280)={0x0, r11}) ioctl$RTC_ALM_SET(r10, 0x40247007, &(0x7f0000000000)={0x1e, 0x1, 0x12, 0x6, 0x7, 0x7f, 0x3, 0x126}) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r9}, {r12}], 0x2, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x107000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) [ 188.492015] input: syz1 as /devices/virtual/input/input186 [ 188.515318] devpts: called with bogus options [ 188.568805] input: syz1 as /devices/virtual/input/input187 [ 188.642134] input: syz1 as /devices/virtual/input/input189 [ 188.653465] input: syz1 as /devices/virtual/input/input190 [ 188.722696] input: syz1 as /devices/virtual/input/input191 [ 188.739104] input: syz1 as /devices/virtual/input/input192 20:08:10 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='fdinfo\x00') perf_event_open(&(0x7f0000000040)={0x4, 0xfd83, 0x2, 0x40, 0x0, 0x40, 0x0, 0x50d, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x11e632b8, 0xa}, 0xe422, 0x0, 0x1f, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2000000000000c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000180)={0xf, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x3153b527}]) io_destroy(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000006d1a6b21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b99dd0f7d992479cba5d6ba14e66a23157ecc96cb4c4ba470e21857de95f84ae370c97cb2f521166cb91102693de27f8e46f17dcad95cb70a81bb7b8790b09c7495407174adbccc1e2d23380e20bfc8622d9fdcce37da4bb0202c0a2cfa65c2cb5b806261df40cd5982f79651a43830c84bf7"]}) flock(r4, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,', r5) sendto$inet(r6, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 20:08:10 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000200)={0x0, 0x7d, "9a398a933c58b324bce4315eb882ba85928f473e87b0355d91be3112bd0cf29abaea1629a144c0a6993402b8c335c926ecefa655c0a4a96d9639d899984e8fecd4b6c2fd7fe1648cd09f381c92a7fce7d90c63c76d93fef070f25ac6d2e661a31c3c486f8bf23c7af126cfaf2d72b05282f0a174fa62962f4b813474b0"}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r7 = getpgrp(0xffffffffffffffff) write$P9_RGETLOCK(r6, &(0x7f0000000340)={0x35, 0x37, 0x2, {0x1, 0x9, 0xab1c, r7, 0x17, 'cgroup.subtree_control\x00'}}, 0x35) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000100)="97043e52fa044c7ece91979c180e054ac4d63e3a5020af17bb8e2d05bc68b2ee09038897150e51eca44919dd7c6558fbc3833a7f0e69868bfa3139c448928912d39f4a06a3d92bac04fb717598264ca20228ca80b433ac204beff9a93cffdb850107cf8931acb399b09d908dd78c18f9d3a5f0d7ba71a282a3bd4cdda8d9080fed19249169e0af69573635709264ad", 0x8f) [ 188.792334] input: syz1 as /devices/virtual/input/input188 20:08:10 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='fdinfo\x00') perf_event_open(&(0x7f0000000040)={0x4, 0xfd83, 0x2, 0x40, 0x0, 0x40, 0x0, 0x50d, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x11e632b8, 0xa}, 0xe422, 0x0, 0x1f, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2000000000000c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000180)={0xf, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x3153b527}]) io_destroy(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000006d1a6b21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b99dd0f7d992479cba5d6ba14e66a23157ecc96cb4c4ba470e21857de95f84ae370c97cb2f521166cb91102693de27f8e46f17dcad95cb70a81bb7b8790b09c7495407174adbccc1e2d23380e20bfc8622d9fdcce37da4bb0202c0a2cfa65c2cb5b806261df40cd5982f79651a43830c84bf7"]}) flock(r4, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,', r5) sendto$inet(r6, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 20:08:10 executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = timerfd_create(0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = memfd_create(0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c463ce402a57ad1b1af58f38d8639baa945b9b202a40da91496000026cbe9b9b6c490b403003e000000100000000020968dd9bee5817a51a1018f400df1ae24bdf14f266dd67d5b120f1d4bd27f242cadc8"], 0x3f) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xce) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETX(r5, 0x5432, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000440)=@v1={0x0, @adiantum, 0x4, "0000000000000100"}) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r6, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r6, 0x20, 0x0, 0xfffffeff000) fallocate(r6, 0x0, 0x0, 0x10000101) fgetxattr(r6, &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', &(0x7f0000001d00)=""/4096, 0x1000) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) fgetxattr(r7, &(0x7f0000000140)=@random={'user.', 'selinuxbdev\x00'}, &(0x7f0000000380)=""/174, 0xae) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x84003ff) write$eventfd(r3, &(0x7f0000000280)=0xffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x0, @local, 0x1f}}, 0x0, 0x0, 0x0, "30bbe9a78470f1d6562884859d3d21581250a985ab9e45a7f53fe87fd6dc040f7968bb9752242eb7a7a6f318e3fc177d7c894a31fe14035ed68258eec7efd703aeaf50f1fbceea95e691f424d356be9b"}, 0xd8) 20:08:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) 20:08:10 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sco\x00') write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:pam_exec_t:s0\x00', 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x202000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000140)=0x80) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x140000) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000180)=0x1) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/4096) r4 = syz_open_dev$mice(&(0x7f00000011c0)='/dev/input/mice\x00', 0x0, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200)='/dev/net/tun\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001240)={0x10001002}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001280)='/dev/rtc0\x00', 0x1, 0x0) fremovexattr(r6, &(0x7f00000012c0)=@random={'user.', '\x00'}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001340)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r7, 0x4, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) mount(&(0x7f0000001440)=@filename='./file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='securityfs\x00', 0x60000, &(0x7f0000001500)='-cpuset\x00') ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000001540)=""/172) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000001600)={0x7, 0x80000001, 0x1000}) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getegid() getgroups(0x4, &(0x7f0000001700)=[r8, r9, r10, 0x0]) r11 = creat(&(0x7f0000001740)='./file0\x00', 0x2) sendmsg$TIPC_CMD_GET_NETID(r11, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xb0040400}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008090}, 0x20002000) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000001880)={0x6, 0x9}) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vga_arbiter\x00', 0x105082, 0x0) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r12, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10210404}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, r13, 0x102, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x20040002) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/mls\x00', 0x0, 0x0) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001ac0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r14, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40800040}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r15, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400020b0}, 0x14000080) [ 189.192760] input: syz1 as /devices/virtual/input/input193 20:08:11 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='fdinfo\x00') perf_event_open(&(0x7f0000000040)={0x4, 0xfd83, 0x2, 0x40, 0x0, 0x40, 0x0, 0x50d, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x11e632b8, 0xa}, 0xe422, 0x0, 0x1f, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2000000000000c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000180)={0xf, 0xfffffffffffffeb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x3153b527}]) io_destroy(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000006d1a6b21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b99dd0f7d992479cba5d6ba14e66a23157ecc96cb4c4ba470e21857de95f84ae370c97cb2f521166cb91102693de27f8e46f17dcad95cb70a81bb7b8790b09c7495407174adbccc1e2d23380e20bfc8622d9fdcce37da4bb0202c0a2cfa65c2cb5b806261df40cd5982f79651a43830c84bf7"]}) flock(r4, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,', r5) sendto$inet(r6, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 20:08:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsync(r0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013070000000000000000fe800000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085b55f544991b5a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000e5ded35713882b9ed9bc5c5a1c66b92f789b133c"], 0x150}}, 0x0) [ 189.360495] input: syz1 as /devices/virtual/input/input196 20:08:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000480)) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x61) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) ftruncate(r4, 0x200006) 20:08:11 executing program 1: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab5e, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300150100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff74, 0x400}], 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000140)=""/81) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) r6 = geteuid() r7 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r9, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r9, r10) getgroups(0x4, &(0x7f00000002c0)=[0x0, r7, 0x0, r10]) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) write$P9_RSTATu(r3, &(0x7f0000000300)={0x7e, 0x7d, 0x1, {{0x0, 0x57, 0x0, 0x7fffffff, {0x80, 0x4, 0x3}, 0x9020000, 0x8000, 0x800, 0x3, 0x2, '^@', 0x5, 'ext4\x00', 0x0, '', 0x1d, '\\selinux:GPLem0GPL@\'[-trusted'}, 0x12, '/dev/loop-control\x00', r6, r7, r11}}, 0x7e) ioctl$TCSETX(r3, 0x5433, &(0x7f00000000c0)={0x1, 0x8001, [0x4, 0x6, 0x40, 0x1, 0x100], 0xbd2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:08:11 executing program 5: syz_open_procfs(0x0, 0x0) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) syslog(0x0, &(0x7f0000000280)=""/93, 0x5d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) timer_create(0x0, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffdc1, 0x0) socketpair(0x1, 0x0, 0x81, &(0x7f0000000180)) add_key$keyring(0x0, &(0x7f0000000940)={'q2z', 0x1}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) keyctl$setperm(0x5, 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000740)="d9691afc51e571dc7c0c2636e799c25338886ad6841baee093dd765e4eea0d571d0ac40f740db2788465a85a4cf84fa8cbc138e8c095ce00da378b80c2b67e804decfb3dade71fdad83b27496d5d83", 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005f976c892b000009000000f66240f47afd7f7c6e5ef722d2aef01697452c280b0a04", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x150042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x8000000000001}) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0x0, 0x5, {{0x0, 0x3, 0x2, 0xfde7, 0x0, 0x8bc, {0x5, 0xfc, 0x4, 0x0, 0x1f, 0x62, 0x400, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x7ff}}, {0x0, 0x1}}}, 0xa0) 20:08:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$packet(0x11, 0x2, 0x300) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f0000000040)=0xfc76e4a4e14c28fd) perf_event_open(&(0x7f0000000040)={0x1, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x200000, 0x8f) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket(0x10, 0x5, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x160) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780), 0x1000) [ 189.654863] audit: type=1400 audit(1573762091.379:46): avc: denied { syslog } for pid=9122 comm="syz-executor.5" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 189.690441] input: syz1 as /devices/virtual/input/input197 [ 189.782651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 189.824425] EXT4-fs (loop1): invalid first ino: 0 20:08:11 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x5, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x0, 0x53d, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000240)=0x1, 0x4) r8 = gettid() fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x0, r8}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) bind$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) 20:08:11 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r1 = syz_genetlink_get_family_id$nbd(0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r3, &(0x7f0000000000), 0x1c) r4 = dup(r3) r5 = open(0x0, 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r6, &(0x7f0000000000), 0x1c) r7 = dup(r6) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, 0x0, 0x8000fffffffe) r9 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10000, 0x200) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030c2cbd7000fedbdf25050000001c00070008000100", @ANYRES32=r5, @ANYBLOB="08b448dadc48239ff600fd00", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x4008008}, 0x24800) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000240)=0x1) execve(0x0, &(0x7f0000000280)=[&(0x7f0000000040)='selfwlan1\x00', 0x0, &(0x7f0000000140)='\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='eth1cgroupmime_typeppp0^em0\x00', 0x0, 0x0, &(0x7f0000000400)='proc/\x00']) geteuid() 20:08:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) 20:08:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) connect(r1, &(0x7f0000000100)=@in={0x2, 0x4e23, @remote}, 0x80) shutdown(r0, 0x400000000000001) 20:08:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 190.064217] input: syz1 as /devices/virtual/input/input198 [ 190.173983] selinux_nlmsg_perm: 69 callbacks suppressed [ 190.173994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=9164 comm=syz-executor.3 20:08:12 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/p]pfkey\x00 \x00\x00\x00\x00\x00 \x00\x11\x00', 0x432600, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1810c2, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0xcd) r1 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) quotactl(0x1000, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20, 0x6bf}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) rmdir(0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ptrace$getenv(0x4201, r2, 0x63, 0x0) socket(0x0, 0x0, 0x0) mkdir(0x0, 0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x9af30d1efd49f006, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) fstat(0xffffffffffffffff, &(0x7f0000000500)) 20:08:12 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4148a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x5, @perf_config_ext={0x0, 0x800}, 0x0, 0x2, 0x3ff, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) [ 190.388437] input: syz1 as /devices/virtual/input/input199 20:08:12 executing program 4: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f0000000940)='./bus\x00', 0x141042, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {0x0, 0xfffe}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$binfmt_misc(r1, &(0x7f0000001180)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYRES32=r4, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC=r4, @ANYRES16, @ANYRESDEC, @ANYRESHEX=0x0], 0x1068) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x16d2) rmdir(&(0x7f0000000080)='./bus\x00') ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x0, 0x0, 0x3}) [ 190.477051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 190.596680] input: syz1 as /devices/virtual/input/input200 20:08:12 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e21, @multicast2}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) 20:08:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) [ 190.954036] input: syz1 as /devices/virtual/input/input201 20:08:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x38}}, 0x0) exit(0x45) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0xb694d547739efd33}]]}}}]}, 0x38}}, 0x0) 20:08:12 executing program 1: ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x7815}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = accept(r3, &(0x7f0000000280)=@vsock, &(0x7f0000000000)=0xffffffffffffff5a) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x13}}, 0x22d) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x1e, 0x0) 20:08:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="240000001a0007041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, 0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2b, 'cpu'}, {0x16, 'cpu'}, {0x2b, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2d, 'rdma'}]}, 0x2e) 20:08:13 executing program 5: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) r0 = open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000ea9ded79fbdbff7f0008000000000100"/32]) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)=ANY=[@ANYBLOB="0000cd00b03ff739d5b86b44ae237ca749f330564427346f47a8c288f9c7edfa96a63a48553772f16e82ed2574786ac14d59fc9200ceb0172747008abbb40cb3313be07273fa2b0926a8a03bf93f7c895ed5a14f6be3164152848fa4b9a5ff5ea39e240d8c1cb59b3dc4869ffebf9fbfae763cc409b876eddf093ca66d6e16a8e2ecc098b389f01d6072712ec6922808dca512197d8b178faba0684d50fd4584928805fc3ab3284938e3d87dfbae1297bdaa17971a8ff54956c1e6f5e307160a22e29c46306eb97667861a6f77310fdfab"]) sendmsg$nl_route(r0, 0x0, 0xc001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000100)) socket(0xa, 0xa, 0x67) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) dup(0xffffffffffffffff) [ 191.348037] input: syz1 as /devices/virtual/input/input202 20:08:13 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r0, r1, 0x0, 0x10000) 20:08:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 191.813755] input: syz1 as /devices/virtual/input/input203 20:08:13 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x80000001}}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000200)) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x80000000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) write$eventfd(r0, &(0x7f0000000100)=0x400000000000000, 0x8) 20:08:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0xa4) r1 = dup(r0) r2 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0xffffffffffffff7c) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) sendfile(r0, r3, 0x0, 0x8000fffffffe) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000017c0), 0x71, &(0x7f0000000300)=""/175, 0xaa}, 0x2}], 0x2, 0x2000, 0x0) 20:08:13 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f2", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3a6b6c328ffff0000000000000911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001ffa3f000000c96e416d47bd030002d57f1efdb0c492c96a01e503f1b8c6d48994a06c"], 0xa3}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0x4) 20:08:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'nat\x00'}, &(0x7f00000003c0)=0x54) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x2}) dup2(r4, r5) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00', 0x400}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCNXCL(r6, 0x540d) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0\x00', 0x8, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace(0x4207, r9) fcntl$dupfd(r8, 0x0, r8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) 20:08:13 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(0x0, 0x0, 0x0) r2 = socket(0x18, 0x0, 0x3) alarm(0x10008) connect(r2, &(0x7f0000000000)=@sco, 0x12) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) fstat(r1, 0x0) getresgid(0x0, 0x0, &(0x7f0000000280)) getgroups(0x2, &(0x7f00000002c0)=[0x0, 0xee00]) close(r0) r3 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4f126d817891da9c}, 0xc) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r4, 0x0, 0x8000fffffffe) [ 192.066399] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 192.081566] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 192.116655] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 20:08:13 executing program 0: dup(0xffffffffffffffff) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket(0x0, 0x9, 0x0) chown(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT2(r0, &(0x7f0000000540)={0xc, 0x1c3, "256df9be0639616f3908b18c3b2ceced1a44d15b123e11d5e3fd62e0bdb2e55893e4ebeb5f62e9c47db58c3744fed097d69c0394ae320fcdc09a451358ec911514232805f3772e94d69421c58927828d9c98eb4b413229ce885ef2722e8651df7ae9313a372117ea679373b83d283b9fdc74f477fea4d9a454f4fd55ab646fa15ac41db18999f659c93483eb8875e7822578522952829bc9c14ca5426c28b86a69a0a3439385d58f985832537ff221c4acb8440b85cf5f8d476e18b681b800419cf51ca6025f5a752143d6fb6a5c6470770054a8235c1562690a2a59aaf6a347c0bc464d904346aeb64bf1a6650fa8624279fb354d6ba6fd956b8c35248cfed49cd12188d280916b9efa377d001e7bf2b81bf1028865bd686aca2eed9e8d43dff8a8956482e2a312601ef024dfef80eafe7171eb73f417ff371b4b683a5a561a2167fdda7c9b62807467e77000a754dfff596ec29a029d3788aba0270e1cea4f11f921cd74f75449361b4b1ff6b31a8a8bae7064bc99338c2ac31b578967e9bfa5534cef27a3a7b9884302ae362986a12d919919ef8cf632b8b7e6453fd04efb74e9ecd8b2050df8a2857f0e8fb6b7d0e25e67c57c37e9eca97e26bbe272e1a71047f7"}, 0x1c9) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) chown(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = socket(0x0, 0x9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) r3 = gettid() r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={r5, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000bbdffc)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = getpid() ptrace$getsig(0x2, r7, 0xffffffffff600003, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x15}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r8, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket(0x0, 0x9, 0x0) r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r11, 0x127a, &(0x7f0000000380)) [ 192.145041] audit: type=1400 audit(1573762093.869:47): avc: denied { create } for pid=9268 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 192.185570] EXT4-fs error (device loop4): ext4_iget:4756: inode #2: comm syz-executor.4: bogus i_mode (175037) [ 192.202332] audit: type=1400 audit(1573762093.929:48): avc: denied { write } for pid=9268 comm="syz-executor.5" path="socket:[21829]" dev="sockfs" ino=21829 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 20:08:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="230228efb4a24fe846892bc04b26c0d8d21d5d6fe0eb92552fba4784466ebedbcc3e2a012ecdb76658b7e06c0e09d1ede6c1f37b9c352ef8586e5d4380a818249f6eb7d9f6e66d4c0a596ee41f32cf359a30a74dc68c37cfbef5c16f3e648860faf8228bf63bb3bf08002a74e3e6017fe72e8d5b7cc2cba5236e1882c6011ce19e32098f6919c7234ce9fe065d74f23c995de2be4e7b3881c92986a5aba8278d5c4ea927afd19e8f003e80efbe0b12d442ddd93c1436c9cbafacbe4b03ba4b656f9029509bed808f4aa86c8dc50de43149543b911caf5e9ccd3cb6c416e6ba34d30721ffc6933bef175b6dcfcb5c2c428f750e12bf"], 0x2) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa08, 0x7}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 192.369800] EXT4-fs (loop4): get root inode failed [ 192.402887] EXT4-fs (loop4): mount failed 20:08:14 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x1da, 0x0, 0x0, 0x0, 0xfffffffffffffec6}}], 0x4000000000003be, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f0000000240), 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) 20:08:14 executing program 4: r0 = dup(0xffffffffffffffff) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/150, 0x96) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000140)={{0x2, 0x0, @descriptor="7c9d952ea15ec59b"}}) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000200)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0x3, @loopback, 0x1}, {0xa, 0x4e24, 0x8, @loopback, 0x5791}, 0x8001, [0x0, 0x0, 0x6, 0x4, 0x4, 0xd7, 0x4, 0x2]}, 0x5c) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1a7) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5000) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000340)={0x10001, 0x23d5163e, 0x492a, 0xae, 0x0, 0x8001, 0x20}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)={0x29, 0x6, 0x0, {0x1, 0x6}}, 0x29) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000400)) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) fadvise64(r7, 0x6000000000, 0x1, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000540)={'ip6gre0\x00', 0x2}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x9, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xab}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x1a, &(0x7f0000000640)=""/26, 0x40f00, 0x4, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x9, 0x4800000, 0x101}, 0x10}, 0x70) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) accept$inet(r7, &(0x7f0000000780)={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x10) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000800)=""/69) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/checkreqprot\x00', 0x2d000, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000008c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x10) r10 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000980)) dup3(r2, r10, 0x80000) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000a00)={0x10000, 0x8, 0x0, [{0x0, 0x0, 0x5, 0x2, 0x5, 0x20, 0xff}, {0x511, 0x9, 0x6, 0x4, 0x7, 0x1, 0x7}, {0xffff, 0x10001, 0x9, 0x3f, 0x3, 0x2, 0x9}, {0x2cd8, 0x1, 0xfeda, 0x6, 0x0, 0xc8, 0x8}, {0x7, 0x7, 0x14000000000000, 0x40, 0x1, 0x0, 0x40}, {0x6, 0x2, 0x40, 0x4, 0x20, 0x4, 0x9}, {0x9, 0x3, 0x8, 0x9, 0x29, 0x1, 0x2}, {0x7fffffff, 0x80, 0x3f, 0x3, 0x1f, 0x1, 0xff}]}) [ 192.509931] audit: type=1400 audit(1573762094.239:49): avc: denied { ioctl } for pid=9297 comm="syz-executor.4" path="socket:[21847]" dev="sockfs" ino=21847 ioctlcmd=0x8914 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:08:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 192.699689] input: syz1 as /devices/virtual/input/input204 20:08:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200006) pipe2$9p(0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x10001, 0x3, 0x8, 0x4, 0x7}, &(0x7f0000000080)={0x3, 0xfffffffffffffffc, 0x5, 0xd4, 0x8, 0xffff, 0x1, 0x7}, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x3f, 0x3f, 0x4, 0x8000, 0x1}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={0xe7bb}, 0x8}) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 192.932695] audit: type=1400 audit(1573762094.659:50): avc: denied { connect } for pid=9268 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 20:08:14 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 20:08:14 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0xb) shutdown(0xffffffffffffffff, 0x3) get_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xbe, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) pipe(0x0) syz_open_pts(0xffffffffffffffff, 0x141900) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x36a) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) [ 193.188008] input: syz1 as /devices/virtual/input/input205 20:08:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200006) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = epoll_create1(0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xc0d) munlockall() setxattr$security_smack_entry(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f0000000180)='system\x00', 0x7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20:08:15 executing program 0: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) r0 = open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x5, 0x6, 0x0, 0x5053, 0xa3, 0x2}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) getsockname$packet(r1, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)={0x0, 0xd3, "b03ff739d5b86b44ae237ca749f330564427346f47a8c388f9c7edfa96a63a48553772f16e82ed2574786ac14d59fc9200ceb0172747008adeb40cb3313be07273fa2b0926a8a03bf93f7c895ed5a14f6be3164152848fa4b9a5ff5ea39e240d8c1cb59b3dc4869ffebf9fbfae763cc409b876eddd093ca66d6e16a8e2ecc098b389f01d6072712ec6922808dca512197d8b178faba0684d50fd4584928805fc3ab3284938e3d87dfbae1297bdaa17971a8ff54956c1e6f5e3fe150a22e29c46306eb97667861a6f77310fdfab807d1ddafd88"}) sendmsg$nl_route(r0, 0x0, 0xc001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) io_setup(0x0, &(0x7f0000000100)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) io_submit(r5, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = accept$inet(r0, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r11) io_submit(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0xbf, r6, &(0x7f0000000140)="8c2ff5ebcea3aa50bfa053d2d928d0", 0xf, 0x0, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x7f, r7, &(0x7f0000000400)="d793270c29ecb790253f8b31d0a5b269f1f82c85c61fd14052c4709ae771e708108ad79f572e94ff60525dfdb25bfdd6ee588aeef2eef7bc3331584f176f71ea93f1651eff821bc8d848e9600ccf6c9687431b609c7bc48db91976190707da53aaff725b816108cddd9eb9828dc15ce31b1a38c8c3006faf", 0x78, 0xfffffffffffffff9, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0xfff, r8, &(0x7f00000004c0)="18176a3d65df98b6e3426bd376b047b2e9214942b466d5e39e07e1cccf96d7bfbc4e346ebae94d5e79b621d9bfd3", 0x2e, 0x200, 0x0, 0x0, r9}]) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) dup(0xffffffffffffffff) 20:08:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 193.550979] input: syz1 as /devices/virtual/input/input206 [ 193.608757] input: syz1 as /devices/virtual/input/input207 [ 193.681639] input: syz1 as /devices/virtual/input/input208 20:08:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0200050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c1}]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x94, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x110a, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x2, 0x3a}, @fda={0x66646185, 0x8, 0x1, 0x39}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x3}, @acquire, @clear_death, @acquire, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x1}, @exit_looper], 0xd1, 0x0, &(0x7f0000000240)="363e8202e2014f9d0cd57d8d6ea01b7a0a34d7a59344c58af551742e67846f75b1d378b0b843cf1e8d942d8b86f2e1d7b5316b8de092d4fe8cebe510779a103f114119358b4eadef0b37ac57e2387676049d218c43e4a1c79f9d15c6e9198a833a5cf82b2f52286954e80bb1027ade6401e161c51f7372222e9ddfd582e67d488c77aca4df40874f37719cfc9f1ec0ca4d1509ce77b5779c4787287d4cf838f80feba12062f54025c117cdb6b05f541c5f6361ba8d81ffad0b699062e2a6d975f7ab82d0c71ef1372730b13ee6b5680349"}) prctl$PR_MCE_KILL(0x21, 0x2, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x400000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000380)) 20:08:15 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) [ 193.857838] input: syz1 as /devices/virtual/input/input209 [ 194.015031] input: syz1 as /devices/virtual/input/input210 [ 194.300572] input: syz1 as /devices/virtual/input/input211 [ 194.354206] input: syz1 as /devices/virtual/input/input212 [ 194.584962] input: syz1 as /devices/virtual/input/input213 20:08:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:17 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') timer_create(0x5, &(0x7f0000000340)={0x0, 0xe, 0x6, @tid=r0}, &(0x7f0000044000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x9fb7}, 0x1c) r2 = gettid() r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x0, r6}) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)) r8 = creat(0x0, 0x7a1b0eae68a48abb) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') sendmsg$FOU_CMD_DEL(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r9, 0xcbd6a5fba983dd87, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2002808}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000080)) recvmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x1d6, 0x0, 0x0, 0x0, 0x7}}], 0x4000000000000cd, 0x0, &(0x7f0000000040)={0x0, 0x989680}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mknodat(r11, &(0x7f0000000380)='./file0\x00', 0x0, 0x9) r12 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000013) 20:08:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) timer_delete(0x0) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000058) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000180)=""/95) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, 0x2001a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xe985d86e501cf667, @perf_config_ext={0x9, 0xfffffffffffffffe}, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) read(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x20008) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r6, @ANYRES32=r6], 0x3}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000011000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014000300687773696d300000000000000000000024000e00ea05000000000000000000800000000006090000000000000080400000000000"], 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', r6}) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r8, 0x0, 0x2) sendfile(r8, 0xffffffffffffffff, 0x0, 0x0) 20:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000280), &(0x7f0000000340)=0x6e) 20:08:17 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 20:08:17 executing program 1: r0 = memfd_create(&(0x7f0000000340)='\xebK\xb0is\xd1\xad\x86trusdEd.overlaa\x03\x00edirec\xcet', 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) fcntl$F_SET_RW_HINT(r0, 0x409, 0x0) 20:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}], 0x265, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 195.483018] input: syz1 as /devices/virtual/input/input214 20:08:17 executing program 1: clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x20000000) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./file0\x00', 0x140, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = gettid() r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r7 = gettid() fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x0, r7}) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) tkill(r5, 0x3c) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 195.533888] input: syz1 as /devices/virtual/input/input215 20:08:17 executing program 0: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c6be5d53e57e6a8, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x3f, 0x4f, 0x7, 0x2, 0x7c, 0x6, 0x294, 0x40, 0x56, 0xfffffffc, 0x1, 0x38, 0x1, 0x8, 0x5, 0x9}, [{0x6474e555, 0x0, 0x0, 0x2d75, 0x6, 0x9, 0x8, 0x1}], "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", [[], [], [], [], []]}, 0x672) sendfile(r1, r0, 0x0, 0x7fff) 20:08:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0x0, 0x6, {{0x7ff, 0x1000, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000200)={0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nbd(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x0, 0x0, 0x80000001}]}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)=ANY=[@ANYBLOB="04ae335066000000"]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x1002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000180)={0x18, 0xb, 0x8, 0x1f, 0x5, 0xfffffffe, 0x0, 0x114, 0xffffffffffffffff}) ftruncate(r4, 0x200006) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 195.620263] input: syz1 as /devices/virtual/input/input216 [ 195.648644] input: syz1 as /devices/virtual/input/input217 [ 195.707439] input: syz1 as /devices/virtual/input/input218 20:08:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2000000000040}, {0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) r7 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x44c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x20, 0xb7d, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001}, r6, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x9c, 0x2, 0x3, 0xff, 0x0, 0x2, 0xd02c0, 0x12, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x3}, 0x201, 0x3, 0x688, 0x0, 0x7, 0x8001, 0x7ff}, r4, 0x6, r7, 0x0) sendmmsg(r0, &(0x7f0000003040), 0x4000000000001d4, 0x0) accept4(r1, 0x0, &(0x7f0000000040), 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000140)={0x5, 0xd, 0x8000, 0x5}, &(0x7f0000000180)=0xffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xffff}}, 0x10) [ 195.773522] input: syz1 as /devices/virtual/input/input219 20:08:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x84000) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = creat(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x210080, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000840)=0xfffffffffffffdc0) ioprio_get$uid(0x0, r7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000004c0)=0xc) quotactl(0x5, &(0x7f0000000980)='./bus\x00', r8, &(0x7f00000008c0)="f583ebd1cc607287e04a593f3c358fc90c192bf423e0cdc78dd3ca967c04abf164140d2213ad31636040badae62abe8f07df819c293d9e6c3f34f01943dff224bb78a670e4cad47a8b05c28d12438ce1a0fa7be3b2cbf9c8bd76e77c4fec9039de4089abe0b299b966b9477aab50cef32348d69d7ce31293911f6de4499268027d21005bbc45116b5b522e7685d72cb010553eb7dbb09218a50ec4f06810f706ca9e1d4ce26f826a8700b9e4f64e80141260bcb7a2b17ac36791f14fcd") r9 = socket$inet6(0xa, 0x80004, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000480), &(0x7f0000000440)=0xffffffffffffffcb) setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f00000006c0)={0x7, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x10001}}}, 0x88) getsockopt$inet6_buf(r9, 0x29, 0x23, &(0x7f0000000580)=""/219, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r11 = open(0x0, 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000180), 0xff59) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r12 = syz_open_procfs(0x0, 0x0) preadv(r12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0xf, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54e5ab0516dc79e8, 0x20000000000000, 0x0, 0x6, 0x9, 0x3}, 0x0, 0xbfffffffffffffff, r12, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r13, 0x1000008912, &(0x7f0000000040)) r14 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r14, 0x4c80, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x0, @dev}, {0x2, 0x4e24, @broadcast}, 0xe1, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000340)=0x0) ioctl$TIOCSPGRP(r12, 0x5410, &(0x7f0000000380)=r15) r16 = syz_open_procfs(0x0, 0x0) preadv(r16, 0x0, 0x0, 0x1) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r17, 0x1000008912, &(0x7f0000000040)) ioctl$sock_inet_SIOCADDRT(r17, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e23, @multicast2}, 0xc0, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4f2f}) ioctl$sock_FIOGETOWN(r17, 0x8903, &(0x7f0000000400)) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r19 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x281002, 0x0) r20 = gettid() ptrace$setopts(0x4206, r20, 0x0, 0x0) syz_open_procfs(r20, &(0x7f0000000300)='fdinfo\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r20, r14, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30) ioctl$TIOCSPGRP(r19, 0x5410, &(0x7f0000000380)=r21) ftruncate(r16, 0x0) sendfile(r4, r11, &(0x7f00000000c0), 0x8000fffffffe) 20:08:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 196.424183] input: syz1 as /devices/virtual/input/input220 [ 196.523201] input: syz1 as /devices/virtual/input/input221 20:08:20 executing program 5: creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0xdc55f000) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') sendfile(r1, r2, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) 20:08:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r5, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r5}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@empty, 0x4e21, 0xfeff, 0x4e21, 0xff, 0x2, 0x20, 0x20, 0x3b, r5, r6}, {0x100000000, 0x800, 0x483ed8cc, 0x1, 0xffffffff, 0x3ff, 0xffff, 0x1f}, {0x81, 0x4, 0x400, 0x8001}, 0x2bb7, 0x6e6bb8, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0xf4}, 0x7, @in=@multicast2, 0x3504, 0x1, 0x2, 0x40, 0x66fd, 0xffffffff, 0x7}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 20:08:20 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 20:08:20 executing program 0: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000050d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) setxattr$security_evm(0x0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x5) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff2, 0x4002012, r1, 0x0) 20:08:20 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x565}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fchmod(r0, 0x2a) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udplite\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x5, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x0, r3}) getsockname(r2, &(0x7f0000000140)=@caif=@rfm, &(0x7f0000000280)=0x80) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x28, 0x38, 0x10, 0x14, 0x7, 0x44e, 0x5, 0x45}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 20:08:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xfffffffe, 0x3, 0x7, 0x6, 0x1}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x0, 0x4, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) set_robust_list(0x0, 0x0) [ 198.511961] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.549374] input: syz1 as /devices/virtual/input/input223 [ 198.591641] input: syz1 as /devices/virtual/input/input222 [ 198.620534] input: syz1 as /devices/virtual/input/input224 20:08:20 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() epoll_create1(0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x4000065, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) signalfd4(r4, &(0x7f00000002c0)={0x62}, 0x8, 0x800) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x202) ftruncate(r5, 0x28007d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x8fe, 0x600000) sendfile(r5, r5, 0x0, 0x2008000fffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) [ 198.766168] devpts: called with bogus options [ 199.133871] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 199.158531] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 199.173092] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 199.208538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 20:08:21 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) gettid() syz_emit_ethernet(0xce, &(0x7f0000000200)=ANY=[@ANYBLOB="5e8f9769aaaaaaaa2e4c6d4b0ca137661530aaaa8137ffffffa90201ffffffff0000000000000001000000ffff7fff16a601b25344d7f38aa93c6a6301f13514d30233e7fb9f2f7e48cfa363cb55a2375f5f4d07880b32cc8da9f470aaee8fec39f7ffffffde269b43aee9c5686d308b374da387a1fd8f5a443e3a10e45a6588f2deaf81bbbd75a984160be83b91749de4419d6d1b18eeac104a2a6d97560838ea2117a3132205ea77a5a8cf00de2c5aa1ebb5bfb080cf85da360606d84d27ad1a5704600064"], &(0x7f0000000000)={0x0, 0x2, [0x771, 0x10b, 0xfea, 0x322]}) perf_event_open(0x0, 0x0, 0x0, r0, 0x8) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0x10) [ 199.494861] input: syz1 as /devices/virtual/input/input226 [ 199.534817] input: syz1 as /devices/virtual/input/input227 [ 199.560135] devpts: called with bogus options 20:08:21 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0xffffffffffffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x29) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8482) 20:08:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r2 = dup2(0xffffffffffffffff, r1) sendto$inet(r2, &(0x7f0000000040)="302ea947", 0x4, 0x10, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x19, 0x10, "e479191944e808cd98b67e5da33cd5ce42637edfd6f1c6be064d29b78880e90d6f3b8224766ecbc7627c3d730fcb2de7f0a3458b03aea973dfb3d0143a330d38", "60bbe88d472e9268c793063457aa6f0f5cd4bd5e7b8549e5597bb3be6d28dab9", [0xcc6, 0x8001]}) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getresgid(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) 20:08:21 executing program 4: clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4aed12f00", 0x15}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) dup(0xffffffffffffffff) r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r8 = gettid() fcntl$setownex(r7, 0xf, &(0x7f0000000280)={0x0, r8}) renameat2(r4, &(0x7f0000000000)='./file0\x00', r7, &(0x7f0000000040)='./file0\x00', 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) syz_open_procfs(r9, &(0x7f0000000300)='fdinfo\x00') ptrace$setregs(0xf, r0, 0x2c, &(0x7f00000002c0)="d9c0e95e0403fe46407e6fb7729850b97fcd6f2814bdbf7635f4b7fca73c17956a31d849348045603bd6bcd8534188fcb4b1c85e18bccb55945c88b2a2bdfd7741d3aeb0139df9c3969d8f1c73abfcad41e48be300e4926e54aac3703299c3f1d7fdace6f3c059775d0c5f2c48892c91f1a71b41abc34bb88e739a9cf2b84bac7ab7d38053b33e3ae5eb8353163e5d8285d5c40b58d53c541c42ec3479f804106b179be63e3c265375effc4c41f735ef1b11da7d80") ptrace$cont(0x20, r0, 0x0, 0x0) 20:08:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x7f, 0x704, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x1, 0x262b1825, 0x180000, 0x4002000, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x10}, 0x80, 0x0, 0x0, 0x0, 0x4}, r1, 0x5, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x40c2, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x168) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x6, 0x6, 0x2, 0x6, 0x8, r1}) open(&(0x7f00000003c0)='./file0\x00', 0x40c2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r8 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r10, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r10, r11) getgroups(0x4, &(0x7f00000002c0)=[0x0, r8, 0x0, r11]) mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='fuse\x00', 0x2000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYPTR64, @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',max_read=0x0000000080000001,blksize=0x0000000000002200,smackfsroot=vmnet1,&,\x00']) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r12, 0x0, 0x17b) [ 199.770005] input: syz1 as /devices/virtual/input/input228 [ 199.846554] audit: type=1400 audit(1573762101.569:51): avc: denied { sys_admin } for pid=9564 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 200.523784] input: syz1 as /devices/virtual/input/input229 20:08:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd70000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e24, 0x10001, @local, 0x20}, {0xa, 0x4e22, 0x10000, @empty}, 0x4010, [0x9, 0x7, 0x1c7, 0x200, 0xe00, 0x4, 0x6, 0x8]}, 0x5c) accept4$inet(r1, 0x0, &(0x7f0000000200), 0x80c00) 20:08:23 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x26, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xd, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@polexpire={0xcc, 0x1b, 0xb2f, 0x0, 0x0, {{{@in6=@empty, @in6=@local}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) close(r0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") readahead(r4, 0x9, 0x100000001) r5 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x3f) sendmmsg$inet(r7, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000523008cc96b7a6ab000000000000000007000000040800e000000200"], 0x30}}], 0x24, 0x0) sendfile(r6, r7, &(0x7f0000000000)=0x3, 0x7) sendfile(r3, r5, 0x0, 0x20000102000007) 20:08:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000240)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f1377f2f50000fc9e5acf0216d25b5b85b86d76189a8427bac4a3c9014389e04def7eae70155424f39b19b0e332e04b4bc6f4d5c3a0bdb51d8a38438a418efd821cc14f84d7a98fd2d40c76230a1df3fc889fd056b1a481d894aecba792acd8cb9b270cc55c4918b9ab671a62017d055fb4be6dac0e41b20ca37635893efdb20c0b81a5d13f16f121b7a2826ee7f7ee23be6909f9e857a6993a6ce538ce3aaf517b6b3d23115a44b2ede5b68c2f57286cbd53677ce4", @ANYRES64=r0], 0x1e}, 0x1, 0x0, 0x0, 0x80000}, 0x841) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x565}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pread64(r1, &(0x7f0000000140)=""/148, 0x94, 0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) flistxattr(r2, &(0x7f0000000200)=""/40, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 20:08:23 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x800, 0x0) fcntl$dupfd(r4, 0x0, r1) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070100009200000e0000000000000000000000000000000008000000000000000529"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$binfmt_elf32(r8, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xe2, 0x0, 0x8, 0x3ff, 0x3, 0x3, 0x9, 0x3, 0x38, 0x14f, 0x5, 0x81, 0x20, 0x1, 0x40, 0x9272, 0x1}, [{0x4, 0x72934abc, 0x85, 0x5, 0x8, 0x6, 0x7f, 0x5}], "da1a2b1dca371cbe5d6839c0c8a79720a7", [[], [], [], [], [], [], [], [], []]}, 0x969) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) splice(r0, 0x0, r7, 0x0, 0x10005, 0x0) 20:08:23 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 20:08:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:23 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='vboxnet0eth0\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') ioctl$KDDISABIO(r1, 0x4b37) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x40) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1f, 0xa, 0xbd, 0x8, 0x2, 0x3e, 0xee, 0xd4, 0x40, 0x39e, 0x79e6, 0x800, 0x38, 0x1, 0x401, 0x401, 0x2}, [{0x70000000, 0x0, 0x80000000, 0x60, 0x4, 0x81, 0x9, 0xbe29}, {0x6474e551, 0x101, 0x3ff, 0x4, 0x7, 0x3, 0x8a, 0x5}], "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", [[], [], [], [], []]}, 0x6ab) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uinput\x00', 0x1806, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000800)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'U+', 0x7fff}, 0x28, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000880)="336f6ff3aacf7fc02918c1eb98174a6429ea8a2263be5e13ab7222fdff8b929d207250f46f9bd6b6997c3b9ede35455751d933fe8f000561565d9b7b9a2bae0c180edec2748618bdfdcf8b544638423d1598ef3ca870929140e07aa1fa2c29f14bac7caa2312d37d8d61f1c20d5ce31b72a884a25453f4ed2ee99b6537ddbfa08e5625233ca747420dd8e99a07d0377ab855ae3a688f64ea34b1c75c6e0a5fae0a7d531d174a1dfa60d0e65b5958781bc39c2cc41df20c1d3d3b93d3f8c5fd046f48e0c0daa6d370", 0xc8, 0x40040, &(0x7f0000000980)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000009c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_RELDISP(r3, 0x5605) r4 = creat(&(0x7f0000000a00)='./file0\x00', 0x80) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000a80)={0xe, 0x1, 0x69}) epoll_create1(0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000ac0)) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0xfff, 0x8}, 0xc) fcntl$getownex(r6, 0x10, &(0x7f0000000b40)) r7 = openat(r0, &(0x7f0000000b80)='./file0/file0\x00', 0x800, 0x90) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c00)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000d40)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDENABIO(r9, 0x4b36) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='trusted.overlay.nlink\x00'}, 0x10) ftruncate(r10, 0x5) r11 = add_key$keyring(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000e00)='encrypted\x00', &(0x7f0000000e40)={'syz', 0x0}, &(0x7f0000000e80)="62bcf1929fd3611ee567718942fdc02b9be522f8b0", 0x15, r11) r12 = socket$packet(0x11, 0xcaf721bd5c34310d, 0x300) sync_file_range(r12, 0x4, 0x5, 0x0) [ 201.557938] input: syz1 as /devices/virtual/input/input230 [ 201.572796] input: syz1 as /devices/virtual/input/input232 [ 201.589035] input: syz1 as /devices/virtual/input/input231 20:08:23 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) clone(0xdff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f00000011c0), 0x89, 0x0, 0x0, 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CLR_FD(r0, 0x4c01) 20:08:23 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x318}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0x2}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81805) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000a0c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f000000a100)={0x7}, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x1, 0x0, @reserved="7cb7a69c3976ad718fbfd1d7801a14171f089e55f29d8915873746dd45c29a9c"}}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000002c0)={0x9, 0x0, 0x8, 0x8, 0x3, 0x7}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="bf00000029020002000000200000000004000000000000000000008107002e2f66696c653000010000000200000000000000ff7f00000000000000002e2f66696c6530400200000000000000040000005e000000000000000807002e2f66696c653000020000feffffff000000000003000000000000000107002e2f66696c6530010000000007000000000000000cff00000000ffffc907002e2f66696c6530000200000007000000000000009600000000000000fb01002e280000000000"], 0xbf) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000200)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x108000, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000080)=0x101) syz_read_part_table(0x0, 0x0, 0x0) [ 201.663518] input: syz0 as /devices/virtual/input/input233 [ 201.679950] input: syz1 as /devices/virtual/input/input234 20:08:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2d, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0xe4c}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffdb0}, 0x8, 0x0) r4 = gettid() r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000300)='fdinfo\x00') waitid(0x2, r5, &(0x7f0000000240), 0x0, 0x0) r6 = getpid() openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0xd8, &(0x7f0000000180)=0x2, 0x4) sync_file_range(r0, 0x4, 0x7fff, 0x7) getsockopt(0xffffffffffffffff, 0x7, 0x7ff, &(0x7f0000000340)=""/217, &(0x7f00000002c0)=0xd9) rt_tgsigqueueinfo(r6, r4, 0x14, &(0x7f0000000080)={0x0, 0x0, 0x40001}) read(r3, &(0x7f0000000080)=""/128, 0xae3f1a6) [ 201.748946] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (512 blocks) [ 201.796364] input: syz1 as /devices/virtual/input/input235 20:08:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x60, 0x4, 0x8}}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000000802}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_SECUREBITS(0x1b) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) dup3(r1, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup3(r6, r4, 0x0) 20:08:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) r8 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r9 = gettid() fcntl$setownex(r8, 0xf, &(0x7f0000000280)={0x0, r9}) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x7f}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_MAP={0x24, 0xe, {0x35bf, 0x2, 0x0, 0x1000, 0x6, 0x2}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080800}, 0x0) splice(r2, 0x0, r4, 0x0, 0x422000a7b, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfe30) 20:08:23 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fd) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) fcntl$notify(0xffffffffffffffff, 0x402, 0xdb29d1bb41612c69) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f0000000480)='./bus\x00', 0x541142, 0x4) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7ff, r1, &(0x7f0000000740)="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", 0x1000, 0x331, 0x0, 0x2}, &(0x7f0000000280)) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00082dbd7000fcdbdf250c00000008000400fbffffff04000200380002000800050000000000080003000400000008000d000100000008000b000a000000000000000800040003000000080006000900000038000300140006000000000000000000000000000000000108000700000000000800010002000000080003000400"], 0x3}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x80, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24064000) creat(&(0x7f0000000100)='./file0\x00', 0xbd57ed0a1f22df09) [ 202.313034] input: syz1 as /devices/virtual/input/input236 20:08:24 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000240)={{0x3, 0x0, @reserved="ccc5e1412f68dedd4b352f7dfdac9c2ee854d674e63e9f6aad9c6c7ee73bd679"}}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendto$inet6(r1, &(0x7f0000000740)="f18b08b72b6d805c6d05e18b7dd383443824d659fa5e8ab03f411b7e0ece77b9b358dbea9ff275fa3f8ca28f1dae983f4086b50be16efaa7e4544f5ea3cccfc455e37de560fccdca3ab4386dfc201a23bd1c4cd40ac96cc3a0972b34f477ae088bfefc238fa3cb2fa41f494d91d012d27f0097f6b50e33cc86be9b0101a15f1fc6173177e9f3a23cb50afeea171fa86c0e84e4c95366fa3a1babfc7c43751e82942a9391b13823ddfb65acebaddf474d814d56011086b8cdebfdea1ce8ffe48bb3b09e6f7c1c5ccdc82e2efdb1eff420f596464813cfd266d973b97a2a5ac31322", 0xe1, 0x44004024, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1, 0xffff}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000002c0)={0x2, {{0xa, 0x4e21, 0x1, @empty, 0x8001}}}, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00o\xf1\x1fDvSC\xa6\xd0\x19P\xff\xdaB\v\xd5F\x14\xbc0j\x8c\xe4\x1d\x140N\xa9\x05}\x18\x13\f\x9c\x9a\x964\xca\xf5{\xc7\xec]Wg\xf2;\xce`\xed\xd5(\xb4\xc8!\xb3\\\x97\x8c~\xa4M\x05m\x99\x89x)\x19\\\xef\xd4\x1d\xbf\xf5\xc6&e 86\x04\x99\x80\xdb\xd9+\xca\xf0\xc1[\x1eaS\x15^\x04\xacf\x99T\xb1\xfb\xdbb\xa52r\x8c\xde\x02\xebw\x9b\xe8k\xd42Q;F86\xbeg(T\xc6\xe9\xc6\xea\xfe\x9ah(\x06\xc4i\xcd[\xad\xc7u)}-41\xe6\xb2F\xf1\x1e\x05\xc6\xbeh\x9a\xfd\xb7\xaa\xb9\xc6C\x05c\xa6\x8f', 0x7a05, 0x1700) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r5 = getpgid(0x0) get_robust_list(r5, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000100)}}, &(0x7f0000000580)=0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) write(r3, &(0x7f0000000380)="3e82f49438fbc5c8b1030753169864fad381363bc576f2c0646096cddeb36013b451e02da3185a5b4f936b7f9450e3cc87a489ca3fc7222c3b4c45d62d17a800efb8ac072eab824b1e68fcf92704f32cca8b689a88c314d3172bb8aaf3862c02fc6752c1c4ebd1e809b04cc3f6038c95cdbb9d58d7c829850d36a77ec3552950e41b8053ae91fb293fe77f910a616b34c6ca8e68fac70d0e28c211a71a0b103c5817ab60b57e7a653ebc36633e0d2b056824f6c47c", 0xb5) 20:08:24 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 20:08:24 executing program 5: listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24000058) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x5, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWRITE(r4, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x7}, 0xb) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(0xffffffffffffffff, &(0x7f00000045c0)=""/4087, 0xff7) 20:08:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:24 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) r2 = socket$inet6(0xa, 0x80003, 0x8) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') 20:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x2, 0x1) listen(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) r8 = accept4$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80000) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e22, 0xfe5, @ipv4={[], [], @loopback}, 0xfff}, 0x1c) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x80, 0x0) 20:08:24 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000b, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000000000004) [ 202.645101] input: syz1 as /devices/virtual/input/input238 [ 202.717193] input: syz1 as /devices/virtual/input/input239 20:08:24 executing program 4: r0 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) fcntl$setown(r0, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002e80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002ec0)={@mcast2, 0x21, r3}) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 20:08:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) keyctl$unlink(0x9, r2, r5) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff7fffffff) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000200)) 20:08:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/116, 0x74, 0xa0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) dup2(r2, r0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 20:08:26 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 20:08:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:26 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) ftruncate(r0, 0x2) clone(0x2a002800, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000300)=@v2={0x2000000, [{0x8000, 0xa5b}, {0x5, 0xd5}]}, 0x14, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000240)="4ca37c139ed1926782746a6187dd0ed8aa9f4d42d4e71d1f5ec00b64682a6f3cf0c05b3798e7e4446299bb7501a999c11a0a7a4887fc8c6eb2a7101b625127c9f80b49e3229686094e80eedda2be20a44fa50fb813a2f1bd42d2cf1985fe75ddb39f558393041987203135d48bf6280de5f97068ec417c2ebf983baf9959272360c05a3a1cfdefeee72a28f4c994e229bbf9634e24c005c6d9237af982daf469a8d6f31b", 0xa4, 0xffffffffffffffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000380)='syz1\x00') creat(&(0x7f0000000200)='./bus\x00', 0x89) 20:08:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="6bb987f8f4240a7e79ce9ccf01334996435806f611cd6dd834e55e", 0x1b) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) capget(&(0x7f0000000140)={0x0, r4}, &(0x7f0000000180)={0xffffff01, 0x2, 0x0, 0x7, 0x75f6, 0x3}) r5 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x3, r5}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x10000, 0x3, 0x6b6ea056}) io_setup(0x1f, &(0x7f00000000c0)) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000040)={r0}, 0xd) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 20:08:26 executing program 5: syz_read_part_table(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{&(0x7f0000000100)="cb5d1a081c945fc422dc42016e63af81506f575e2da5276d85287f373d7bc3ac735a00000000000000ae", 0x2a, 0x401}]) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ipddp0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) sendto$inet(r4, &(0x7f0000000080), 0x249, 0x40c00c4, &(0x7f00000001c0), 0x1b3) 20:08:26 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$int_out(r0, 0xa8c7, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000000)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6a6f754dffaf98b78268f4726e616c5f6173796e635f636f6d3d69742c646174683d6f2cf458ebedaf266ee0af58c0d7494708ddf759b9df7b9e6696b7a2615d9c4bc7808c004cbd4019c6bcde8bdb4af8c91c15067d67e74e8a"]) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) prctl$PR_SET_FPEXC(0xc, 0x40) 20:08:26 executing program 0: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000001000078e592ef00000000"], 0x28}}, 0x0) [ 204.943976] input: syz1 as /devices/virtual/input/input241 [ 204.984012] input: syz1 as /devices/virtual/input/input242 20:08:26 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) keyctl$unlink(0x9, r2, r5) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff7fffffff) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000200)) 20:08:26 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) keyctl$unlink(0x9, r2, r5) r6 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffff7fffffff) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000200)) [ 205.043077] EXT4-fs (loop5): Unrecognized mount option "jouMÿ¯˜·‚hôrnal_async_com=it" or missing value [ 205.057711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:08:26 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00001e3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0xe8, &(0x7f00000002c0)="67ba0fc7a1dc2ad7063308e65778452a23461eb0953f49ce734e5c115eb9f60fed05e564e96125e8dbb12d264d5886361f4fa93b126874ce94de0f32a7686811685650ad16f3d3358289b753f35076ba54bbc7a6e359164520668b0cd1252f0df202d00c39bdfc1c0ce025bafa9620e1a8092738f20e70db7d0018834d51f660bf8763f2a05ea04b8bf3d99ef487e34ef9aee431944396db93c121effaa39105e5017d0d9c0b944055d7c8795d228f77b35038da7b05e9e30cc5a2e15a73bc30be699397f1a3ab317e1fcfbaad0d4365a71933511479da1ebaecc014ed05e976bd7bace99dc4b4a7", 0x65, 0x0, &(0x7f0000000180)="a7ff5236e39db474d252b0eca177be673ad0bf40c27e851129852d1d23e6dcd024350809a03d7d36fb40436c01d0e6d2b1cc6b2441e25943c6282d0c63ae0b00129fbd1f5a02ac3713180621d2b86782a763a061ec9ccb7f1ab4226b2bec78de33e9b602a7"}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000080)=0x54) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r9) ioctl$TCFLSH(r6, 0x540b, 0x8) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x7}, 0x28, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 205.215625] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 205.224951] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 205.234819] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 205.261683] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=128, mo=a8024018, mo2=0002] [ 205.269794] System zones: 0-7 [ 205.279770] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 205.352580] mmap: syz-executor.1 (10031) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 20:08:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$inet(0x2, 0x0, 0x6) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f0000000100)=0xffffffffffffff0f) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) [ 205.416138] input: syz1 as /devices/virtual/input/input243 [ 205.484865] input: syz1 as /devices/virtual/input/input244 20:08:27 executing program 4: r0 = creat(0x0, 0x34) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="4964b441ac82f8a27a97717c21b796a5ff66ce3e1e7ebf323366da355ba5ec83a1fa27491332c8d43880987507fe1d3971e01012763e0d5c34f99fa89f2da601424f"]) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x20b) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) open(0x0, 0x141042, 0x0) 20:08:27 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80]}, 0x45c) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={{0x1, 0x0, @reserved="4ad22dcf0f287a0f081d42d7d6e2340b037cc6fe65d606065999050e2de00bb8"}}) ioctl$LOOP_CHANGE_FD(r0, 0x1269, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="ffd9531c1969fc15009c5b7213f6012f66b000000000e00700ffffffff6b6f00000062c3a119ff2f9374f021566ecabd3d9ca9d6171079c1998bfe5d315f368500ec07a31300000000005d78df18f57a8ac75f3e9ca77b4db77b74412c65365d3d4564fca87164b1b9d50b219f1dc723214baf9d36b8b2"], 0x77) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x59080280}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x80}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x81) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000004394db5328e935f5fb0ab8b1cc77", @ANYRES16=r3, @ANYBLOB="000426bd7000ffdbdf250200000008000600070000001800040004000000ff0100000100000004000000090000000800020008000000140001000000000000000000008853c19f1ff3b4e6e8320b00000000000001140001000000000000000000000000000000000008000300c4000000080005000000000014000100fe800000000000000000000000000020140001000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x200000a0}, 0x4000000) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000100)={0x8, 0x7, 0x6ff, 0x8, 0x3ff, 0x81, 0xfffffffb, 0xfffffff8, 0x400, 0x80, 0x0, 0x2, 0x1ff, 0xfff7, &(0x7f00000000c0)=""/21, 0x1ff, 0x6, 0x81}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f00000003c0)=""/23, &(0x7f0000000400)=0x17) 20:08:27 executing program 0: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x10c, 0x1, 0x0, "e0f4faa23c1b68d78c9a9b5fa912de7b", "ade4cfc4466d7b0e6ae125cfd7eaf5d2bcff5b2e1779d763b68e88fedc72e038f8b5c695ba5356a2db3150ae54e496b691068c22c1e6dcbe07f58ff392307d02cec22eda8fdeb926e745f9077f068e102cfb8ca52e338bae11bfcc0cc91337bef8bc088cc6ac0fcc8a0ccf97232faa60d539f4443e25ed34cc6b2e49efdcfe9858a25e264f9759a8077803f28def2eb3eb4a72cfd80a06359d790736ec1ab2001c89a0be325ac6407b288e56bbe2f1c7b9008fd7a6b93dfd5cad1e7e921132917cba8141d56e63329bea86a01838652c6545ad8ef05204b63370bbf2ce2aaf986b5b018d780edb83186d23ebbb39c223445bd8f6ba1015"}, 0x10c, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) rt_sigtimedwait(&(0x7f0000000200)={0x101}, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, 0x8) r1 = inotify_init1(0x1400) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000280)) r2 = syz_open_pts(0xffffffffffffffff, 0x40000) write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1', "1aedaf58b09b03cd58b02322fb2c4261f9b7fbcf3de6ac43043c7986ea1b35894c"}, 0x25) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x9, [@const={0xf, 0x0, 0x0, 0xa, 0x4}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0xc, 0x8}, {0x6, 0x7fff}, {0x6, 0x5cb}, {0xd, 0x8000}, {0x10, 0x2}, {0xe}, {0xf}]}, @enum={0x9, 0x2, 0x0, 0x6, 0x4, [{0x7, 0xbb}, {0xc, 0x1f}]}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @fwd={0x8}, @restrict={0x6}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x30, 0x74a59d8f04bbecf7, 0x61]}}, &(0x7f0000000400)=""/243, 0xc1, 0xf3}, 0x20) setns(r0, 0x8000000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='#wlan0\x00', r0}, 0x10) fchdir(r4) r5 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xc0480, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000600)={0x800, 0x65083f06d75e01a8, 0x1, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r0, 0x0, 0x15, &(0x7f0000000640)='eth0)]\\keyringnodev{\x00'}, 0x30) r8 = dup3(r1, 0xffffffffffffffff, 0x100000) r9 = signalfd4(0xffffffffffffffff, &(0x7f00000006c0)={0x401}, 0x8, 0x800) poll(&(0x7f0000000700)=[{r5, 0x2}, {r6, 0x4221}, {r2, 0xa200}, {r7, 0x6000}, {r8, 0x60}, {r3, 0x12a}, {r9, 0x10}], 0x7, 0x101) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uhid\x00', 0x802, 0x0) write$UHID_INPUT2(r10, &(0x7f0000000780)={0xc, 0x88, "77c1598e774be285ee905cd80c244648eedbd18446f24fde9c6596da36c11085371318664997f559f9ef8cf4853b3fe1a14b6ec6cdc56bfe07986be53a377e3e62abc247789162d34bac76ccbe9bd209f9b83db1bf295e2959457ef7496e105c68aa0b590d02058d77829fd4c8a81014a9d474742987eb382b1ba3074c800e11724ffb9fb58e5a6d"}, 0x8e) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000840)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r11 = accept4(0xffffffffffffffff, &(0x7f0000000880)=@caif=@dgm, &(0x7f0000000900)=0x80, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4808000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa8, r12, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3d0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000b00)='/selinux/enforce\x00', 0x2c000, 0x0) write$selinux_context(r13, &(0x7f0000000b40)='system_u:object_r:var_lib_t:s0\x00', 0x1f) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000b80)=0x1, 0x4) r14 = request_key(&(0x7f0000000bc0)='id_resolver\x00', &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)='syz1', 0xfffffffffffffffe) keyctl$assume_authority(0x10, r14) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000c80)={0x0, 0x80000000, 0x0, 0x10001, 0x0, 0xdce}) 20:08:27 executing program 4: memfd_create(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="6da289149ef77d7e87e86509999c8952596188cbd6387085bd5bbbd89d4574b1f001663611a64b50205982ac6b10039f06b800d2eb302a56878fbb543d4ef90b3189a2fc9477a5dadd4db960067680c5a398fdc84071573fd7cded41e6f6a89ea5a31967d5a07bf3857a388e697a08c614cdd32e678ecc3bb0ddd5b612ee34e51c436afe44e341fb3794076270988aa237643db69fd4e9cb63de7411918d030ce0659a93d09ed69b70f9777cabbac0827afc3f024f9d5eb1ec7865bf7f915aa927778e3477e1060e30e9e0b10925"], 0xce) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0x1, 0x4) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x4, 0xb225, 0x1, 0x0, 0x12}) ioctl$TCGETX(r1, 0x5432, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x501040, 0x40) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="938d5eb8f1f921d73b613664806e6f035a781e49a7314b006f896e2365886ffd27822f7197fe475f59fbe6405acbcdbedfaa63f3eddf8b6bd82544a126fb0defb54f2dd6f062181ed7ec849cdab377107e4e900e0786ae6b081c68cb1f94d5a1abc967f992c8901da3ed0691a7698227ce012424c452d7578012de1c4eb9e6815e4a0fe81dde0a9b411a1c5b3f2d4040e2c84b087e973c577d", 0x99}, {&(0x7f0000000000)="b6e1ef241bf3229e3b24237ee4c0620047f914dddcd14d61c75dcedb694b91ce03fb5f345572294ebfb8700bf5556fc381dc", 0x32}], 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$eventfd(0xffffffffffffffff, &(0x7f0000000280)=0xffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x0, @rand_addr="dec527c7c935e681b458a749c94f0d67", 0x1f}}, 0x0, 0x0, 0x0, "30bbe9a78470f1d6562884859d3d21581250a985ab9e45a7f53fe87fd6dc040f7968bb9752242eb7a7a6f318e3fc177d7c894a31fe14035ed68258eec7efd703aeaf50f1fbceea95e691f424d356be9b"}, 0xd8) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) fallocate(r4, 0x50, 0x10000, 0x8) [ 205.723797] input: syz1 as /devices/virtual/input/input245 [ 205.760644] EXT4-fs (loop5): Unrecognized mount option "jouMÿ¯˜·‚hôrnal_async_com=it" or missing value 20:08:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000001380)=0x2fa54f2e, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003f", 0xb}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r2 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0xf50, 0xfffffffffffffffc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSTAT(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="6500950fe0c16269f9d50048000800000030000000000400000000000000000080030900000000000000fffffffffeffffff110073656375726974792e534d41434b36340000000d006c6f40232f295b6370757365740d0073656375726974792e65766d00a8d4aa377d572c1fc5e0244cffb0ae01574305105355d04d5450fffaef1428a5d05d1806b9f53438ef896e7b3471d2293bbeca733a66642796e98ddca35f89232cb9e346f595a7978581d6a6bf65ed2c4f8ae9f059d7fccf46578d50e9b68eac9b573bd5e7"], 0x65) keyctl$link(0x8, 0x0, r2) creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) [ 205.896510] device lo entered promiscuous mode [ 205.909116] device ip_vti0 entered promiscuous mode [ 205.916274] device ip6_vti0 entered promiscuous mode [ 205.923760] device sit0 entered promiscuous mode [ 205.932478] device ip6tnl0 entered promiscuous mode [ 205.939343] device syz_tun entered promiscuous mode 20:08:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000100)=""/17) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x5, 0x5, 0x20, 0x80000000, 0x2, 0x6, 0x79, 0x5f, 0x40, 0x254, 0x9, 0x3, 0x38, 0x2, 0xf80, 0x1, 0xc4d5}, [{0x6474e551, 0x5, 0xaaa, 0xffffffffffff12ca, 0x0, 0x61, 0x4, 0x509}], "c587cb8de18f5046f3ba8f9e050d6d7ca2196e0bd1d41f55a727c044e724ce01c8cc4da27efe693bc8b2a0e1df10f79b9ece15bb63d95bd396e39217bc9269473d8a00096f76bf095137ca740238d39180c1f3eb38c085a6eb", [[], [], []]}, 0x3d1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000300)='fdinfo\x00') r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/route\x00') socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000001c0)={0x6, 0x80}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000001a000000000000000000"], 0x48}}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000400)={@mcast2}, 0x0) 20:08:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000280)={{0x2, 0x4e20, @empty}, {0x306, @broadcast}, 0x40, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 'nr0\x00'}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/249) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000200)={@local, 0x35, r8}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 20:08:27 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f"], 0x0, 0x12}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x400000000084, &(0x7f0000000280)=0x0) io_submit(r6, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000140)='\'', 0x1}], 0x1) tee(r7, r5, 0x1000, 0x0) [ 206.140722] input: syz1 as /devices/virtual/input/input248 [ 206.155365] input: syz1 as /devices/virtual/input/input249 20:08:28 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0x8800) writev(r2, &(0x7f0000001b00)=[{&(0x7f0000001b80)="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", 0x49d}, {&(0x7f0000000140)="87f91d62324155ed823710780c7ecc60fc4a38752f9263f95bf0a70e851626943f9b1f72ec0589f69f07b072fb0c376fd1d3ddcca38aecef470cabf564a9b1a1edad4940c92b7a67b7281227221a7d3d05cbb872", 0x54}, {&(0x7f0000000a00)="99bb732bc208c7d2034444c038f34340ff0379a2066a827807235fb79d8e71eeed11667fb90eeb73f960182c6cf96d073c0817f02e32a137c7531dd358579e12e14bd007915091fc98fae66863df11f087290bea400dc5c0368485dbefb358ebecb9b628442c59ce8b42fd0fc32c8875ff10c053585c4070e1bf1177d4aaeb2ef88ed68689c20f60649d7c55d147fe63d4d02e8f69afd1902c08e269f03df0610fdb59e3ff04d7def1d9b4c132fe027f89a5290a14dcb7890901a7c1b26e5853564479e02133cffe3cc80292c12291158dc0c724145fa11eb4ed003a8cdba30b02de86af360e2c601b09509bd764e7c1cfb4dce44f7d5111de8ce20d55910ea1cd1047dd6a8dd49304a68522c19fc96f93915ed0f82d62922f03f154f3ebcf89158aaf5a4fc5c122fda92665e4c47cb1df6c60268e5d608283078cf08456c53556f3b3891a035c31bf595a632f2e088446764612e8c1867e0133ad83fa6113e12d3d3858d33ec1a070d7531a8404e66c321efff788ed14734905423916dd7fa7f0c5030ebc50658233ad4e1c4475adc75842cbe1b5601643e8be99ae21242e1401d54ca8c60ce8296eb6f0b2e0ab7f422489c9ee5a5bc2d4c366de3c5dda9be08977dc8bfd4fea8a8142f36bd542552fe831395f5dcd96e528d21fc485cc07905946496aa8affbb1794f0271679e628ac60e20e3a4a40718a3fe8529e341f7cc64ecef032c597ea598d8a9453f97e7fb240420bfe9e95a34904fdffb525303c3ca84386c550f53f7d2cb226441f974c5281c3a22565cfd31f4d086f2086eb06cf8ec17568a370f016f3151ccbab0d02ced7f05dbab34819a368b12cc2f225ea140baa2091bb0938ac246f3e5773ea213e5a7df3ec356b6c9c4cf8ef1a9f6f2d47d989db80674600dd36232ae3383e4bcb008b531405d882dd55081a673e2888e1329495c31465dae3ece26fc8e3215b53e0cbf8cb68ccd1faef492df6639976cfcdbb10d1ab42a4d17c175a169e6509af04aca34e83dbfcb4a93b9c716c0714ebdbeb8c3226c2efa82a427f10c8330dc6087d6b219794027b95bb9f3ae5800716620f21fe87c82f9f157c0b828e5c180728df603dfe4e387a740995cb497ea3d3f9de542f3b8e796fd92e1a01de369908492a84cccf72d08e4d206af40e40476a4afcb713183bc193b446c5d57f0308020d4d067d4db48ed8d523ea65ec8529d3d355c70697fc88540bbadd36cf991f1329e8a9b367e42c38db49ae7d046c8b79e94012f048579b372ea3573b525a7d241debe2c1666f6e4155f53b705f9b93aaf6491d0349c8e48872fb3b0d47b67cf05593c321db7c55ee2ec52215ea11343f3766493ca782c3df6010f17e34ca5c98afbd33afa2f2873535afb8b7ee98e415ff35887854ec0f37998affd3dc388c990899f6d2338b016b91c5248163a9831b1ad309cbe02a3aedeaa0d999f2d9a24fb2f0e4d7baa514660cf941d92c3c64af84e19f452c96f65ca9bab6e9e09c7d26f79fc4310899d0f681c57676d2574c2d7cdfc51fcc7a8a757e7436d4da26fcb85c4937016389b6017c06d4f9f4ebc956c10d7fdc05281e1c637977d3d45c377a25ef44659c3b459d420b6ff276fbd5c766b0be0ab8a76148fb019dce0450cf1d4d9b6578b02b66d84f8dd3ee166929fbe5835496425686615672c0d68d526a7b9b5403d04b536c4d399fce3d2331da789a86358e2b14187a4d5d2c95f01b5f8ead3b428ea8141f10c84f3b80dd621236128b4d9ae5b3dfbd685092e0f63a53e49152498e50d7b9643fa3f22e0c5529bf3dae5d0b481e6eee5df19e07b2bf0d63d7139e7298b2151a2718a73d2369a9600ac3d2901a5f86808d571fe04e35db695c28201321295b9f88362c12f10588590273c1fb03e8420b48f0d63eb9d01d54aad8016ca3dee620210dbf2c54d14d6eb77e37bed98328cb8d778963560ce2e236213b6e2a4da292260944b152883021488a1e8fe4059b2ebb6c0d4e3910041ef1fb7d7d7d9925be7955f59c1e5bcb0a0a04ae7db481bf1b2f056342f12e6b3748fbf0924ad13f6b8530d8bd5bb7263dc1525aabdcd3b7780806d69dc6425504614439ad62474cf3c3fbda31027b8538dec02b9ad6334b3db42f7a8deb5a862022055ca40a53f525b293d0e28c99d55a3dbe55935745602c6f7ab149e479457f52f0c038879e0c8da370178828e6ee34da205045f56c81753b1886ec078ff2591d3e6375929194bc20361f0e79224bda9ed4a0850f2050e51a880a085b7d9e90e3095605760553d3d07d8249d84ceb3827b4a3e196debcd0c10aa7a2060720f06fac45e253edf925c4cf50b59fbabc77d3c5666805109a4c4cdcf3255dcfaf27c11cbb1719c50c2ce421e2efa5754d80feb70b49e8080ea422b03acfb31b041753311602076a933b21f40f582eba752c34c8d805ba68fd92e50d14bd1993215c2d05b7f6d72261097368095d999c09bbb51f5ef254d39047f551c9de81c188d2c43448ebb63d1b9acb981d90e705566bb3769b9efa90b54b98837a5e34e70570ae418ea0f6c39299cc2da7e47bcef1eff5887eeb4c901859ead016079388759b602caef85a047d59c466a9644e29c614e45ac95929625efd0cb3270538cd16ed3ce863016cb88490990ca6066d752cdc3f4004ae13e4f3a1d56e8534f8d5b0c25bc6273ca3abf8e3e97847db1baf672bb4324c5041ea7e768ce4bf9eeb7b14089003e8879150a0227278ffe42ad618b1ab8307cf0f6bd0552dca609cbfc2c9e858f023af18de382fa1d1dc9fa10079cb859aefef95303610b2ab67556511acab4d6036f2536cfb13ac29be673549c469d63b85abfc72412c6580a6326dadbafba7328cdc8b7a82099deafdd83a4cdb92d772b1fd7d65583aa03edb0ecf423c9f67b408d66039fc3a8c7140d6056b24c6d308ed6b74be3b9aa092cb6e26c0c353343f35d1329983dc55b501288318c1446b9bb7753ba54231894ef484bec459e81a310ed3ad2e981190dd95a3af1e17449b928bba46cce4e40b4a469a8fa2e47fcd0f888c3c1062a721ece6be2be71a8ae2bc0c1c993521340c70545f5b0df8845a27a7def1d6969eac9be328b13755b2dd4088e7b7e245baaa8c714b51c9770bbb01887dd4533fa0c2b00438d9aafaf19d0ce1ba8dd5af093a5983d296d1f0d977db7d43dd8e55fae00350f70011897070b3d83c02fda937f09f5f1c36e47185868142af7108af355e48605bb7ab2eb9b2b28c74d48a1ea4c9d8bab0e33e542ec3fd84c95800908a3ebf9709b9446e71684fc9c34f6ddcd147913e5a6936b741dc9affb48de5b7bf02a9e0550a308c886283318ab4d2d1793e1f9382ea1bfb9588a4777db247401dc996efeb9a15300d5eb5d00964526a30a50b3bda8aa48ec5962a43827de956b111a32eb2597192ea083bfac52c446a5d7747f47a3691827aa791b46621169ee5aaa5d492791122dcef2370d13140c39351c3a11bf5c82492ab3041e5a04c72dec75092deb08e95b64bcfafac52c805150f57e50d1e8a6d56b7c439956686b9887172249f820e0db50bb43bbf2e4bf4e2ef9fa24c72242a2974594b699cb3201bb0e08389e24fa62d188e50520b416dccffbee5201e819387b9e65195430cb9c08696686bb16d09e9b9b3dd19f99e1143259604fc1b65ffbbe19f321d203a71790af60873943da09d8d6236fc36cf022d3fb8ec5df2b53c33baff6fbcf536ec7f642bf7cddfc5aed3083aa1e4d31a81f04c9495af3dd6a497c1679c4033509cf6a1e5d14145af6b51de7385c830a973f743dd1155831cd4c7293e1d3d6ea020b01278608792f7e5ee066f16e00b734818249f3a9356d3094d1dedf72dffd9625470e767402a0d1cc03536fa98a295308e290deb1281a4fe62b5c45bebbcc57f3701f60600e429155002c3e0d2ca87bab5f8c5d18fad7a9257ecb3933d85b4ea917ec2b86383d7d7077a0d40f35be26dcaa8223be553694b612e910c24a54af2207d03e7cecb097320849b90ef6af215f41a1a790f3db23671c53707ba985f98f156869d051da4e6606fb9db451ac97262185a023f6805b3272ed001b804d5f45065a00493f9117efee63774444713eba6581eeceb0c33f472c09cf3f9e57394b0afd39e5ef3ac480cd78b3adbae0031e487e0304a77fcf147ecce3813ade86886a134321b861f95475a5ac8c20040296edfa60b5aa38e9d6e827ddcc9375b8101af148ac4a896d067f2edf75b806a0a076fbcc1f1f4a8d2a2ea88b968720946422157c04494249f069eb09988302712e67ef6604ca27693bcf1c72a01e9596d555bdd685a90c057718b6d94d47e59583c652fdebe2ba86a8247cbe2e13fcec1252b3b00fc63f91f9730de4d5eecba5001886211065938602af4be20f776247a87663ea9fb1d3b774235f0f626068d327880f8c31f3937de6ac9ab1367f83ae523529bd3f48f0e32cba57f221d0962a2f40f5ad013158c9928d547dcc75100d4624cb07a9e48062dae26ada6fd8806c6ca56a4dfb9c4e35839ac19a85b161f793cda9053d478188a7eaa23ca6ee2b015a83f8d8224d0c2435046ca17bdf8eccf9d9ac773db105261a5a92462bfe3b94bdda644b3b8ab5d3ea1cf8f2e2abc2d50bbed30fe07a1600aa1167040ea11f6009a2f42ad535168ebc844abee082850e7256eef8e03448854aa2c08a73585316191f48660cf2daa1d656f729b94ade0bdd923cc7008cb4868afb932549576605cea33064d82a1625bc56b8cba0a246be151f78e73052f6e8872fed590fb7f20da735d47ce4775af936405d92e8beae12eb13b496c56e7004f48680aae6f5a66059d558e81275dca6f516ca193c757fb931007f7199b2c88bd2dc4663737b966f4fe7cb5cfb8508e87e2e52e584f4d21082d40e3b9ed6eab53c7e3776ec32488718186eccfcbea2b3fa94ebbdbdf44e7007b5834118b464fb13997bb0e5ed1d48317ac77a2701f04c52232ad2e58337879fba14493a754f36a062cfa6acc3aee01e89c2d8b760492a7f77f5e93fed27a7ca1ce515e3362f6a046230d7dee4851cfb6db7a3a2191d1f6e727f8d1ee91064310a67f5b1952d61c335366de1bfea7e81d95e5ce64b19deb5328629ad69ebcb27e31f35ae1a73078ea75f504fa214742605867cb157bc32b7a3a28e78a44ec863650b5926f17dd211ec19aadacd5431d83d10a0787ff519287145afbde3e1b8b20c8568ae5107d61903faa008071b7fd1b8218fd72c38cb3a1dbf56dad6c23ee5b3d26b0dcf3c7d0bde3db545edc7f99992613f2e3254d061d7306ef56fe19bbc42d6ae14eca1cf6e52870c8d531e7db1fd628573707ef78867164725f5fb646dfd82715fa863cb2fbdfd99ab66efa32c090710e589abd2d062fd55570eba42aec78fff1f39e9f11521b49cd76aee812bc3f50763ef5a656e7003abb76db07ef5a8e4f555a73f377901b8ab8b5a7dcd3e9556a37f66684afd1af71818a495f63d55e93ed6fc4bc4f01d3795cbcdc9f46d1b0df56bc4a9308bd9663fd3d5b186cb14fd67b0fadc06d4772e15e6ccbb68e8accc184b009354290915d2f5b9d832c31505112c2d067f14bb978e0624e8b05ce3715e92c577c32cd2cf9b424ec6309f4a9f51e2cd15c0fb2777ce0ecce36a73b92fb7e367c872bd68712674f400b30c4d2826ad9f364957e28116639bcf3a70152ae924f19397e6396bc3820d0d507e316ffb373cfb50d3cfca8ac3bb644a4c39597ef66790e1fa82a3828d7d7672783a45a6e6d03ee750", 0x1000}, {&(0x7f0000000340)="879f95d35b1c948bbdc2ede48500df719025dbf636ae050dbcc8ea6efee920e999d4b6e1f9bd220cf645f4925aa3d49e2ec3e11d8853df9118cf9d09accdc0a4dbc784b37fff2da09f1f27ca3be5067683f27594115231f12b9a2eae92bbb0452459f1acf482b7a080cd194b7854054cfff630ec7350a17dadabe1b4595f76f792e037590b2271eb5c460bbcb29be544f8f2ef10947c181f7906cc056b8c231e3d56c3ec3626c750a99e00cd639db5ef735d9547cf7f1355a8603ada5fd7134cf4c925d8f01deea1a6a3b95eba9c913ffa45548246f57dd93b2bc7ad9ae1d974cb9d8ddf08a0c14628", 0xe9}, {&(0x7f0000000000)="6e9325a46086fa4afe1ea4664d33e49cbf3738e96f55760f04d97a74d83aa0a0be8176ce58693b521631cba8785e925b360c0d6dc5ae", 0x36}, {&(0x7f0000001a00)="9934787d3abf72d51531b293ec1a38ce951945093746df943923df7c2e81b45911244f583d80041d670d279063c51ac3a16d6caa2217b29609327b0ffe4cda88103cecef81dee17274a057065a94e086009d1f956768b2d5d8e754d9770c48c005924d310090a67dc46f82c9f321e416f5dece51778e9b27d674aff46148e7a70afcd9e931b012c1e75d2ca27183e3223658dfd2cbf7f3eedd8f00338d774a86a4d54491b39cbb2ec57df39b975e563cb463e374aa0805cdfbe9eef52e1aceac23cd1a512b9863e3f6b065b8540f9fb23ce83c27070b60e18a60eff480697c1cc292ce2c29a7f1a4143d30035ee561347144f06d", 0xf4}], 0x6) 20:08:28 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x420000) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7, 0x80, 0x1, 0xee9, 0xb, 0x6, 0x8, 0x7f, 0x10001, 0x40}) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$peekuser(0x3, r5, 0xffffffff) r6 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000280)={0x80000000, 0x6, 0x10000}, 0xc) 20:08:28 executing program 4: pipe(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0xff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x80000, 0x13) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lstat(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r2, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000001140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) socket(0x0, 0x0, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, 0x0) getresgid(&(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000580)=0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000070000008608000000040058"], 0x18}, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x0, 0x3) setresuid(0x0, 0x0, 0x0) getresgid(&(0x7f0000000480), 0x0, &(0x7f0000000580)=0x0) setresgid(r6, r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_open(0x0, 0x0) getdents64(r1, &(0x7f0000002340)=""/4082, 0xff2) 20:08:28 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci={0x1f, 0x0}, &(0x7f0000004640)=0x80) r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r21, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)=ANY=[@ANYBLOB="30040000", @ANYRES16=r7, @ANYBLOB="000829bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="bc0002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004002000000008000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r15, @ANYBLOB="c400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c5ffffff08000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="840202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x430}, 0x1, 0x0, 0x0, 0x8005}, 0x20040010) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:28 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f"], 0x0, 0x12}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x400000000084, &(0x7f0000000280)=0x0) io_submit(r6, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000140)='\'', 0x1}], 0x1) tee(r7, r5, 0x1000, 0x0) 20:08:28 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00\xddd\xadR\xcd\xf0\x9ac=,\x814\xe9\xd1*c\f:\xe2p\x96\x0e<\x80\aY\xed@\x8f/\x0f\xedDVQ\xac\t\x8d\xbf\x91\xa2b]IG\xc1\x87r\xb0\xd69\xb1\xbdar\x83k\x0f\xa1Uj\xa0\xc6\x0e\xb3u\r\xaa\xad\xab\x7f4\f(\xea\xd2\xcc\a\x1f\x9a#\xa3#U\"\xa6\xf38\x80}\b\xdfE|\x12\xf5F\xd0F\xc45\x9b[\xa1D`I\xd4+\x1el\xb1k\x1c\xd9\x82\xa9B\xef\xbb\xf4\'%\xef\xb6\xfa\xcd\xd6O\x85B\xb5\xd4;\x93)\x8d\x85\xce]\x9d\xcb\xc3\xe5J\x16\x88\xd2!Rf+v2[\xef\x18\xc4\xacG9\x13\xcaa6\xaf4CH9\xf0\x99i\x05\xe0uFR3\a\x04\x9e$T\x80U\xcf\x94\xcf\x14^\xfc\xb7', &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0xf8ffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='devpts\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/197, 0xc5) r2 = getpid() mlockall(0x1) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$binfmt_misc(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0xffffffffffffff1c) r8 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x8fff) 20:08:28 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffe76, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000240059cfa1460c4390e50d0000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70"], 0x3}}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xdd4388eef2dc78ca, 0x0) recvfrom$inet6(r4, &(0x7f0000000100)=""/58, 0x3a, 0x2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000003, 0x0) [ 206.536517] devpts: called with bogus options [ 206.548087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.550360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.550521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.550639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.550745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.550847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.550946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.551042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.551148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.552557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.552702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10147 comm=syz-executor.4 [ 206.595553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.922413] input: syz1 as /devices/virtual/input/input252 20:08:28 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) getsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000080), &(0x7f0000000240)=0x4) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x100, 0x0, 0x6}}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)) r8 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x8, 0x70bd26}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10010008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xcc800}, 0xc000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendto$inet(r0, &(0x7f0000000100)="8ebf", 0x2, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @dev}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, 0xffffffffffffffff) setsockopt$inet_msfilter(r10, 0x0, 0x29, 0x0, 0xfdc8) recvmsg(0xffffffffffffffff, 0x0, 0x10000) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) recvfrom$inet(r0, &(0x7f0000000540)=""/161, 0xa1, 0x10000, &(0x7f0000000600)={0x2, 0x4e23, @local}, 0x10) 20:08:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8212}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu}) 20:08:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8212}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu}) 20:08:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 207.328164] devpts: called with bogus options 20:08:29 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000047c0)={0x0, @empty, @dev}, &(0x7f0000004800)=0xc) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:33 executing program 5: ioperm(0x0, 0x65, 0x0) clone(0x80802a4524, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="35b9953ab2256996ccf059d02aadcc39384591e38ee81d7904e847e8203ba3548a95838cd6f0cd7597149842e0029b5b4692617a9a3e0f7153dcf3ab68ba9e3849243d0b11009d5342626bcfff8e05144a359ff717800bc64894ba45fc14e02a6fcc6e77c0a6c03b8e5c16", 0x6b, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x8000000) 20:08:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) ioprio_set$uid(0x0, r1, 0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYBLOB="c6292fdfe740aba82d39d236ab243347a178fb1fb08609f55c860b7274ce37fba681b500d0c814f800b8011a484e65b37e86636906751b312c2e4c24e0ef4ea10fc513231a3a3ea6b418c982290a93fa975cc22ca7c07ced93b665d9e45871f7687d63f44d4d86aeccdc5cc66722970b"], 0xfc7c) socket$inet6(0xa, 0x80000, 0x20) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0xffff, 0xb0a109f6852cddb3, 0x2}, 0x20, 0x169abb1b, 'id0\x00', 'timer0\x00', 0x0, 0x8, 0x7ff, 0x2, 0x7}) 20:08:33 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x8000, 0x100) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r5 = dup3(r3, r4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r7 = gettid() fcntl$setownex(r6, 0xf, &(0x7f0000000280)={0x0, r7}) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @multicast1}}) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f00000001c0)='./bus\x00', 0x6, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r10, 0x200006) sendfile(r9, r10, 0x0, 0x8000fffffffe) 20:08:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:33 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:33 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f"], 0x0, 0x12}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x400000000084, &(0x7f0000000280)=0x0) io_submit(r6, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000140)='\'', 0x1}], 0x1) tee(r7, r5, 0x1000, 0x0) 20:08:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) mkdir(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) pread64(r4, &(0x7f0000000480)=""/190, 0xbe, 0xcd) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) preadv(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0}, {0x0}], 0x2, 0x0) 20:08:34 executing program 5: r0 = dup(0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffb) open(0x0, 0x1c1042, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r2 = inotify_init1(0x800) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x541042, 0x306d73171fa9d06f) ftruncate(r4, 0x2007fff) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) ftruncate(r5, 0x80003) ioctl$VT_RELDISP(r5, 0x5605) openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4320}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 212.314809] input: syz1 as /devices/virtual/input/input255 [ 212.444413] input: syz1 as /devices/virtual/input/input258 20:08:34 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd}, {0x9}}}, 0x28}}, 0x2020) r1 = dup3(r0, 0xffffffffffffffff, 0xc7d78b9431bc1090) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x28, 0x25, 0x103, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000000)=""/33) [ 212.631002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 20:08:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$f2fs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x7ba0b1f59e3b7f69, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) fallocate(r3, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r3, 0x0, 0x8}) 20:08:34 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x17) r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) accept$inet(r1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0xff40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 20:08:34 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:34 executing program 4: syz_open_procfs(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010200180021080800bc6c4caff6602dda1d259c746f829bca25", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) fchown(0xffffffffffffffff, 0x0, 0x0) getegid() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') timer_create(0x2, &(0x7f0000000180)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_delete(r1) socket$unix(0x1, 0x1, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0xdae03) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:08:35 executing program 4: r0 = creat(0x0, 0x34) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000100"]) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x20b) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) dup2(r2, r3) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) 20:08:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="bd", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB="49c6499c757b67f681ec6af99b03d3603e074058253ff55d42f9ec0c12f708e38077a7dd43ec1d5b5e1d2621d39a9d3ec314005900fe8000000000000000000000000000bb0800610062627200dc00890008008700ffffffff0332dbce860e406186359b488c0131bb7341ca12dcbb9af7cd74bfba47d2316f07cc6cb96ed6747390561567e1c881c823492b5f467153b91df7b96bec7e48c4921489be8dd8b1062ee381087f548100"/178], 0xc9}}, 0xc0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) [ 213.448625] input: syz1 as /devices/virtual/input/input262 20:08:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x40, 0x0, 0x40, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x11e632b8, 0x9}, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2000000000000c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x3153b527}]) io_destroy(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00000030870000000000000000000000000000000000000000000000000000000000000000000000f76100000000000000000000000000000000000000000000000000000000000049c10ce3dd3ce02c91345b000000000000000000cc100000000000000000"]}) flock(r3, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,', r4) sendto$inet(r5, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) [ 213.547859] input: syz1 as /devices/virtual/input/input263 20:08:37 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x5, &(0x7f0000000280)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x8) 20:08:37 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) get_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) perf_event_open(0x0, r1, 0x4000000000000000, r2, 0x8) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) 20:08:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000000), 0x10000000d) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x141) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="102c14099c9d4c9030772fb5bb02b29801156f1bf0c7479a6ae0bec0c36ad79ff4e216cc2ca7720d00e3ba8e08a3564b2b3c5bb42be7e7e2235312e0422d31a57eee4e0598b36e2254db81672608", 0x4e) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x6060, 0x1, 0x9, 0x1ff, 0x16, 0x80, 0x7, 0x28, 0x8001, 0xed}) 20:08:37 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f"], 0x0, 0x12}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x400000000084, &(0x7f0000000280)=0x0) io_submit(r6, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000140)='\'', 0x1}], 0x1) tee(r7, r5, 0x1000, 0x0) 20:08:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:37 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000004680)={{{@in6=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000004780)=0xe8) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:37 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x800000000000000, 0x3012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0xb43af0227c1663ab, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) unlinkat(r3, &(0x7f0000000340)='./file0\x00', 0x200) socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000300)={0x1, 0x0, 0x5, 0x80000001, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) r6 = socket(0x10, 0x800000003, 0x0) bind(r6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='children\x00') ioctl$UI_DEV_CREATE(r2, 0x5501) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x60000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) [ 215.421125] input: syz1 as /devices/virtual/input/input264 20:08:37 executing program 5: perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000807f000000000000000000400000e5f8f1ac000000238000001e00"/44]}) socket$inet6(0xa, 0x0, 0x3c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3b24, &(0x7f0000000740)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x300}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x9) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) poll(0x0, 0x0, 0xffffffff) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 20:08:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000000), 0x10000000d) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x141) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="102c14099c9d4c9030772fb5bb02b29801156f1bf0c7479a6ae0bec0c36ad79ff4e216cc2ca7720d00e3ba8e08a3564b2b3c5bb42be7e7e2235312e0422d31a57eee4e0598b36e2254db81672608", 0x4e) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x6060, 0x1, 0x9, 0x1ff, 0x16, 0x80, 0x7, 0x28, 0x8001, 0xed}) 20:08:37 executing program 4: keyctl$revoke(0x3, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffd, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) 20:08:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 20:08:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self\x00', 0x2100, 0x0) sendfile(r1, r2, &(0x7f0000000500)=0x680, 0x7f) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="0078f476ff0da2184ea365ab5b7976798707fc2f477aa11ca95c73adaee08e5ebb9105a14d031c7d9e62548576d3b94fba13a7797a7a0bcf0c36dcfaa260d63ac3f2fb8406ea12161841e1ca28f78dc95a7006f4d882a04de67a68bff4e848d7716e588016df5547b369ab53b22eb46a90bb9d01755b2e67c2616abe063e93aedb4c64168c0a3bd902e363a498ce5bd5c540318ea4abb31b94bc998d22e0fd81178c7b901f577082db04fbf4c3ff3fa8b0", 0xb1, r3}, 0x68) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendto$inet(r1, &(0x7f0000000600)="b9dc7ccbc652ff4cf0d1e0fac303ce7e2b21dd5b1bcdb6bb6b66173d0e9b1c00d8d87df7cace2f1e1620e3a014032ecef9979363711307067d2f5e85f2c0e55bea9f39f2cdd664269e7e60bac207049a3789e9b0f564a8834d3badfee8c998", 0x5f, 0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_open_dev$binderN(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x2) r5 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="63feffff", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf25000800010070636900140002003030307fffffff3231302e300000000008008200000000", @ANYRES32=r8, @ANYBLOB="10000100e1657464657673696d000000100002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="000001007063690000000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="060001007063690014000200303030303a30303a31302e300000000008008b0002000000"], 0xac}, 0x1, 0x0, 0x0, 0x20082000}, 0x80) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1108160}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r7, 0xbe898f27c03e00af, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x40000001) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 216.152505] input: syz1 as /devices/virtual/input/input266 [ 216.897864] input: syz1 as /devices/virtual/input/input267 20:08:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0xd, 0x1}, {0x5, 0x1}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000080)=""/193, 0x4c, 0xc1}, 0x20) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_mount_image$msdos(&(0x7f00000003c0)='msdos\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@fat=@check_normal='check=normal'}, {@fat=@errors_remount='errors=remount-ro'}]}) 20:08:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 20:08:40 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:40 executing program 5: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write(r1, &(0x7f0000000000)="38d3ec7a20bd31063e2b6837ceec16670d6b99bc370137428c2c2a565f27ef64454d6a7da0f7881e6dc9fc6eaf82734692168942a076", 0x36) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) 20:08:40 executing program 4: accept(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x140042, 0x6ec599407b9ef0e) close(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xb) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) 20:08:40 executing program 4: r0 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x401, 0x6c}, 0xc81, 0x0, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x26e, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 218.525519] input: syz1 as /devices/virtual/input/input269 20:08:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) pipe(0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) fstat(r3, &(0x7f0000000140)) setresgid(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = creat(0x0, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) fstat(r5, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 20:08:40 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000001000800122000000100000000000000000006000000000000000000000800000200e00040e0ff00000000000000000000000000ada800800400004015000000000003000600df120000020000809014ffbbf00000000000000003000500000100000200003b306306000000000000000003"], 0x80}}, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'bond_slave_0\x00'}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='uncongined_u:system_r:insmot_t:s0-s0:c0.c1023\x00', 0x2e, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 218.537744] input: syz1 as /devices/virtual/input/input270 [ 218.570665] EXT4-fs warning (device sda1): ext4_group_add:1612: No reserved GDT blocks, can't resize 20:08:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x4, 0xefd4, {0x82, 0x7ff, 0x0, {0xfe5, 0xffff}, {0x7fff}, @const={0x7, {0x400, 0x7, 0x4, 0x100}}}, {0x57, 0x1000, 0x7f, {0x0, 0x7}, {0x3, 0x7fff}, @const={0x3, {0x0, 0x4, 0x5, 0x5}}}}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x4000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'\x00', 0x9e}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@loopback, 0x35, r6}) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) 20:08:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000000140)='./file0/bus\x00', 0x100) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c37dfd755c6d450727c13c9f7"], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x24, &(0x7f0000000000), 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x8, 0x70bd26}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1014000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0xfffffffffffffeb6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 20:08:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x127, 0xfffffffffffffffd) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000380)=0x54) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000000)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r4}) recvfrom$packet(r3, &(0x7f0000000180)=""/162, 0xa2, 0x40000000, &(0x7f00000002c0)={0x11, 0x16, r4, 0x1, 0x3, 0x6, @random="775d969fbacd"}, 0x14) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x200000b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) socket(0x11, 0x800000003, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) 20:08:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240), 0x10) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7fffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x80000000, 0x7, 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000180)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7f, 0x2}, 0x7) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_yield() r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000340)={'eql\x00', {0x2, 0x4e20, @empty}}) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r8, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000002c0)) 20:08:40 executing program 5: memfd_create(0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f00000002c0)={'system_u:object_r:klogd_var_run_t:s0', 0x20, 'unconfined', 0x20, 0x100000000}, 0x45) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x40) pwritev(r3, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r3, 0x0, 0x0, 0x10000101) fgetxattr(r3, 0x0, &(0x7f0000001d00)=""/4096, 0x1000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_buf(r4, 0x0, 0x0, &(0x7f0000000080)="6ed846e2dfe5f2b686727578", 0xc) fallocate(r1, 0x0, 0x0, 0x84003ff) write$eventfd(r0, &(0x7f0000000280)=0xffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x0, @rand_addr="dec527c7c935e681b458a749c94f0d67", 0x1f}}, 0x0, 0x40, 0x0, "30bbe9a78470f1d6562884859d3d21581250a985ab9e45a7f53fe87fd6dc040f7968bb9752242eb7a7a6f318e3fc177d7c894a31fe14035ed68258eec7efd703aeaf50f1fbceea95e691f424d356be9b"}, 0xd8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000140)=0x8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 20:08:41 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000e00)="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", 0x770) sendfile(r0, r1, 0x0, 0x10000) [ 219.424277] input: syz1 as /devices/virtual/input/input272 20:08:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) fcntl$setstatus(r3, 0x4, 0x4ec00) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xd4, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe0fc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) write$cgroup_type(r5, &(0x7f0000000340)='threaded\x00', 0xffffffc5) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) 20:08:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(r4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = gettid() r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r4, 0x8) close(r6) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f00000000c0)=0x3, 0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r9 = gettid() fcntl$setownex(r8, 0xf, &(0x7f0000000280)={0x0, r9}) ptrace$setopts(0xffffffffffffffff, r9, 0x0, 0x0) 20:08:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x127, 0xfffffffffffffffd) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000380)=0x54) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000000)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r4}) recvfrom$packet(r3, &(0x7f0000000180)=""/162, 0xa2, 0x40000000, &(0x7f00000002c0)={0x11, 0x16, r4, 0x1, 0x3, 0x6, @random="775d969fbacd"}, 0x14) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x200000b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) socket(0x11, 0x800000003, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) 20:08:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x127, 0xfffffffffffffffd) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'security\x00'}, &(0x7f0000000380)=0x54) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000000)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r4}) recvfrom$packet(r3, &(0x7f0000000180)=""/162, 0xa2, 0x40000000, &(0x7f00000002c0)={0x11, 0x16, r4, 0x1, 0x3, 0x6, @random="775d969fbacd"}, 0x14) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x200000b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) socket(0x11, 0x800000003, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) 20:08:41 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f0000000140)='./file0/bus\x00', 0x100) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c37dfd755c6d450727c13c9f7"], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x24, &(0x7f0000000000), 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x8, 0x70bd26}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1014000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0xfffffffffffffeb6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 20:08:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x5, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x11000) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000240)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x3d5, 0x2, 0x2, 0x0, 0x3, 0x10, 0xfffffffffffffffb, 0x80000000000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) signalfd4(r5, &(0x7f0000000240), 0x8, 0x81800) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6a002, 0x0) 20:08:46 executing program 0: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x190) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="6b47c21878ba6ba459b54682e90254bc35e6529356865b12e39146ec4ce6ca271d60d045637152201047edadf5cae66a3125e7a203fd8a351c345d26e960c98238f3638d0941da2402a2884af5e447c9b70bf5f732ad5eb34d67e25383f6e653d446afac8f2216a6074d38a35937"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x2) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$getflags(r1, 0x3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x108) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x100000001) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r3, r4, 0x0, 0xffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x8100, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) fallocate(r0, 0x4, 0x0, 0x1) write$selinux_access(r2, &(0x7f0000000140)={'system_u:object_r:syslog_conf_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x4}, 0x48) fallocate(r2, 0x0, 0x0, 0x84003ff) 20:08:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$EVIOCSABS3F(r2, 0x401845ff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) ioctl$TIOCNXCL(r3, 0x540d) 20:08:46 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 224.465950] input: syz1 as /devices/virtual/input/input274 20:08:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 224.508613] input: syz1 as /devices/virtual/input/input275 [ 224.528621] input: syz1 as /devices/virtual/input/input276 20:08:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r3 = dup(r2) ioctl$KDADDIO(r3, 0x4b34, 0xd864) r4 = fcntl$dupfd(r1, 0x0, r1) getsockname$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r5 = open(&(0x7f0000000240)='./file0\x00', 0x415b443, 0x4) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x0, r6}) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000180)=""/139) [ 224.583239] input: syz1 as /devices/virtual/input/input278 [ 224.638767] input: syz1 as /devices/virtual/input/input279 20:08:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 224.785572] input: syz1 as /devices/virtual/input/input281 20:08:46 executing program 2: ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:46 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r3}, {}], 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000b00)) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000240)) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)}, {&(0x7f0000001440)}, {&(0x7f0000002440)="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", 0x5f0}, {&(0x7f0000000240)}], 0x4, 0x4) r5 = getpgid(0x0) r6 = syz_open_procfs(r5, 0x0) preadv(r6, &(0x7f0000001400), 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000001c0)) 20:08:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163f9268061a548179e7958640548a8388e4840000000000000000000000000000000000000000000000000000000000000000080000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f0000001540)=ANY=[]], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x600000}, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)=""/172, &(0x7f0000000000)=0xac) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sync_file_range(r2, 0x2, 0x6, 0x4) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) add_key(0x0, &(0x7f0000001000), 0x0, 0x0, 0xfffffffffffffffc) 20:08:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x2}, 0xffffffffffffff3a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x1001, 0x180) write$P9_RFLUSH(r1, &(0x7f0000000300)={0x7, 0x6d, 0x2}, 0x7) connect(0xffffffffffffffff, &(0x7f0000000140)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) fadvise64(0xffffffffffffffff, 0x1, 0x74b6, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="f1ffce1d534a3326e454a963d1702d0e2e"]) accept$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x52) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040), 0x20000000000002a4, 0x0, 0x0, 0xfffffe9e) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fsetxattr$security_evm(r4, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000700)=@v2={0x3, 0x0, 0x2, 0x2, 0x76, "40832f527b20a8e1dc0bbb9561412fc4fae689472b29bd3fc3232863455cfea9d0df7ecfa609b4439a7fffac8a2a140f329d8091d66fe681d4ea4d7157fe75c1ed76092b72a105ddbd1d9c4194a960507fde862d42ac68b73a2dddfa5df26bd90c0639fad913ba8d1926c3f9513dc3079d9701679657"}, 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300150100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x5, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='selfwlan1\x00', &(0x7f0000000100)='system\x00', &(0x7f0000000140)='\x00', 0x0], &(0x7f0000000440)=[&(0x7f00000002c0)='.$\\ppp1\x00', 0x0, &(0x7f0000000340)='md5sumsecurity)\x00', &(0x7f0000000380)='.md5sumnodev.\x00', &(0x7f00000003c0)='/\x00', &(0x7f0000000400)='proc/\x00']) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)=0x0) ptrace$getregs(0xe, r5, 0x1400, &(0x7f0000000500)=""/148) open(&(0x7f0000000640)='./file1\x00', 0x8102, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) [ 225.096369] binder: 11040:11041 unknown command 653878033 [ 225.102131] binder: 11040:11041 ioctl c0306201 200002c0 returned -22 [ 225.122321] binder: BINDER_SET_CONTEXT_MGR already set [ 225.128139] binder: 11040:11042 ioctl 40046207 0 returned -16 [ 225.213587] input: syz1 as /devices/virtual/input/input282 20:08:47 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 225.280676] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 225.340225] input: syz1 as /devices/virtual/input/input283 [ 225.358720] input: syz1 as /devices/virtual/input/input284 [ 225.374008] input: syz1 as /devices/virtual/input/input286 [ 225.422642] input: syz1 as /devices/virtual/input/input287 20:08:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800e1ff0f00050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4], 0x38}}, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x0, r6}) r7 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x10040, 0x48) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00082dbd7000fcdbdf250c00000008000400fbffffff04000200380002000800050000000000080003000400000008000d000100000008000b000a000000000000000800040003000000080006000900000038000300140006000000000000000000000000000000000108000700000000000800010002000000080003000400"], 0x3}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b8, r8, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x353c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x17}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x9d58ecc99141ac33}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40010}, 0x14040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}]}, 0x44}}, 0x0) [ 225.475071] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 20:08:47 executing program 0: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x190) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="6b47c21878ba6ba459b54682e90254bc35e6529356865b12e39146ec4ce6ca271d60d045637152201047edadf5cae66a3125e7a203fd8a351c345d26e960c98238f3638d0941da2402a2884af5e447c9b70bf5f732ad5eb34d67e25383f6e653d446afac8f2216a6074d38a35937"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x2) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$getflags(r1, 0x3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x108) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x100000001) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r4, 0x8007ffc) sendfile(r3, r4, 0x0, 0xffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x8100, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) fallocate(r0, 0x4, 0x0, 0x1) write$selinux_access(r2, &(0x7f0000000140)={'system_u:object_r:syslog_conf_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x4}, 0x48) fallocate(r2, 0x0, 0x0, 0x84003ff) [ 225.532734] selinux_nlmsg_perm: 20 callbacks suppressed [ 225.532744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=11081 comm=syz-executor.5 20:08:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffb, 0x10}, 0xc) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r3, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="8c410000000000006d03e0ff1200000085100000ffffffff0d47f4ff100000006282feff72f6fdef4c313000fcffffff18160000", @ANYRES32=r1, @ANYBLOB="0000ae33cbf9000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000004500600010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0xfe, &(0x7f00000001c0)=""/254, 0x100, 0x2, [], r3, 0x10, r0, 0x8, &(0x7f00000000c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x9, 0xff}, 0x10}, 0x70) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:08:47 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) write(r1, &(0x7f00000000c0)="3d96b4791e8df3778e38b401759ebb04fd7541219a", 0x15) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000480)={0x3f, 0xe, 0x43e3d5a64ee703b5}, 0x4) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000300)='fdinfo\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001740)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) fstat(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="bf18b58daa6feac6d0ce282957b187f69b8da516c47df2f83c76a7b078e500fdeeca355b2001131f3f4a706d027cc09078de7c7b722687f74e4588a9a612f22036d6ff2842b6d56fd90608c121b8322502d2120a22ba19712dfcef5184066ed82716cdfa68498fb7e41ade0d4d3daa27aaa276393975827d9e0e86ea936a85076187fef7745f31f6e201f6b4952b8f802c5fe99dc9bf2b4efdeee440486374e0f29a69379bcfb7e164c77beae696c131dbdc22fc47721aa820a180eca5d2208decbaa7defdb8351df092075b303ac720b22cde4d616a90733094b35ceaebaa052adfa04d79a3c51fdaf1d1059363f7613b0515", 0xf3}, {&(0x7f0000000100)="fb09c26a47da85e260e998abdec7ae07ead79b07d703da8262f9e9588d9e95c2ba534d3ada208969e80fe006fd5590c323467b905d901205f091c255acf8243cd78e4ea960d8793bc196d068d2692ebb8d55a23d625129", 0x57}, {&(0x7f00000015c0)="257b01a1606b931f8c6cb03fc6063a77be5b11c5719c2aabba85ff3dc8a0cc14a61b013c45cad2378a492d51bb28ba9b764f3884343c0fc2a785ef4acf4dafd524ab0001bf55c81a9067e867b31d7242353121115208690b47f609bdf09990d23d90cc858c9d7227d2728257d0e2d1689dbd6158a72afc712e7df6395a91c6053cb025daba7bcbcff90402470bde9098f0b647d008f0c32798fc7d0bdc51835a512c17c47d5a9e72437db7e34d164001ab58512cc4d8a9fd7891783d5d38d25e5e3397b3f9be15b57912c77d298cc5bcb6b3e001", 0xd4}, {&(0x7f0000000180)="550bcce51b9ba603035b30ae6fde746fce268809ebc4e7897918977046f4f1581c7a46", 0x23}, {&(0x7f00000002c0)="e683c64b5eba67039c0a4819a9c09a90cc13f0ecdb08ac114a3164eeb59608f14dfcd5", 0x23}], 0x6, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x840}, 0x5800) 20:08:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0x200, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)=0x4, 0x4) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$packet(0x11, 0x2, 0x300) lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="00fb280100df1d0fc44f3c9767fbc1b8b5ceb8bd2d8f6822a21914b2185807d7ab46c0d8ef5762224d60"], 0x28, 0x2) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = socket(0x0, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000140)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000005040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net6\x06\x0f\xcf\x9cprotoc') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x20000000001) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f00000001c0), 0x100}) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f00000000c0)) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x233, 0x8}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 225.578207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pig=11088 comm=syz-executor.5 20:08:47 executing program 2: ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 225.668677] input: syz1 as /devices/virtual/input/input289 20:08:47 executing program 1: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207070902000000201d053e0d275a98"], 0x10}}, 0x0) 20:08:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000080)=[{&(0x7f00000042c0)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x10082, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000480)={0xffff, {{0xa, 0x4e23, 0x2, @empty, 0x2}}}, 0x88) splice(r0, 0x0, r1, 0x0, 0x422000a7b, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getegid() request_key(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x80080, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fadvise64(r4, 0x4, 0x3, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) 20:08:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = dup(r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00'}, 0x45c) shutdown(r2, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) syz_open_dev$sndtimer(0x0, 0x0, 0x0) munlockall() syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000540), 0x118) recvmmsg(r4, 0x0, 0x0, 0xf50d547c16d7effc, 0x0) bind$unix(r4, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 20:08:47 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:48 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8080, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000140)=0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3, 0xca6539960d16f9c2, 0x7, 0x0, 0x9}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="995c1f000000000000745d53563e2e47ef4b2b45ef6108648100000000000002000000e8f7f8fde159031e5407026830d4", @ANYRES32=r5, @ANYBLOB="08000200e0000002"], 0x20}}, 0x0) 20:08:48 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000300)='fdinfo\x00') r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000300)='fdinfo\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x36, 0x0, 0x6, 0x0, 0x1ff, 0x40, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x2, 0x1000, 0x9, 0x100, 0x400000ca, 0x8001}, r6, 0x10, 0xffffffffffffffff, 0x2) r7 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0xfd46) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 226.382191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11184 comm=syz-executor.1 [ 226.402536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11184 comm=syz-executor.1 [ 226.415800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11185 comm=syz-executor.1 20:08:48 executing program 0: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r2, r3, 0x0, 0x80000001) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r7 = socket$inet6(0xa, 0x6, 0x2) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendfile(r7, r8, &(0x7f0000000400)=0x2, 0x3) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x238, r9, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb38}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8}, 0x0) 20:08:48 executing program 2: ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 226.490281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=11191 comm=syz-executor.0 20:08:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) writev(r0, &(0x7f0000000280), 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, 0x0, 0x8800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) syslog(0x4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x61) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) r9 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r11, r12) getgroups(0x4, &(0x7f00000002c0)=[0x0, r9, 0x0, r12]) r13 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r15, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r15, r16) getgroups(0x4, &(0x7f00000002c0)=[0x0, r13, 0x0, r16]) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r20, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r20, r21) getgroups(0x4, &(0x7f00000002c0)=[0x0, r18, 0x0, r21]) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r6}, {}, {0x2, 0x2c2a9c66bbfb8896, r7}, {0x2, 0x3, r8}], {0x4, 0x3}, [{0x8, 0x6, r12}, {0x8, 0x8, 0xffffffffffffffff}, {0x8, 0x1, r13}, {0x8, 0x7, r17}, {0x8, 0x0, r18}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 20:08:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x40000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xb9b, @mcast1, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) recvmmsg(r1, &(0x7f0000002b00)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/222, 0xde}], 0x4, &(0x7f0000000400)=""/30, 0x1e}, 0x4}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/16, 0x10}, {&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000680)=""/227, 0xe3}, {&(0x7f0000000780)=""/19, 0x13}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0xa}, 0x80000000}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000002340)=[{&(0x7f0000001b80)=""/104, 0x68}, {&(0x7f0000001c00)=""/255, 0xff}, {&(0x7f0000001d00)=""/250, 0xfa}, {&(0x7f0000001e00)=""/73, 0x49}, {&(0x7f0000001e80)=""/5, 0x5}, {&(0x7f0000001ec0)=""/195, 0xc3}, {&(0x7f0000001fc0)=""/210, 0xd2}, {&(0x7f00000020c0)=""/209, 0xd1}, {&(0x7f00000021c0)=""/174, 0xae}, {&(0x7f0000002280)=""/140, 0x8c}], 0xa, &(0x7f0000002400)=""/225, 0xe1}, 0xc5b}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002580)=""/129, 0x81}], 0x1, &(0x7f0000002680)=""/237, 0xed}, 0xda}, {{&(0x7f0000002780)=@nl, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002800)=""/73, 0x49}, {&(0x7f0000002880)=""/53, 0x35}], 0x2, &(0x7f0000002900)=""/153, 0x99}, 0x3}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000029c0)=""/56, 0x38}], 0x1, &(0x7f0000002a40)=""/191, 0xbf}, 0x2}], 0x6, 0x32a73bc51a8ddb6e, &(0x7f0000002c80)={0x0, 0x989680}) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 226.604065] input: syz1 as /devices/virtual/input/input291 20:08:48 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001440)="a6b376ba8a2e765ef5d450171bcab9a225a1c6fa8d2c8b4c8520a0cff53a03f91a777f8b93be8a31aadcc724a372ea16cb2dc74348232ebd56b3b8742d115468dfe8de3dfe3435c84a2050644b07975e0cb3e06853bfeb389b497defe81a4bb0d961710c7036386d6ea96f19788874c7e95d4c02493897816f4e2559832d1c7718069f0230cf8d4681b2d1c2dd63377fd9946069f0b381dc820723ff4fbed6865c6cde1bbef2fede739b2ab3b6f49cb1cc6a364a48f70ee2187520c952455405b66263fa765478fce0bb2cd3bff8ce468f02eb8e9dbae1018d4ea35d473a3d59728eb465bca64cbaa869d6dbfd9eb1ad6fa448cda3d2d434642c3c35a9b5bbfd087deb6d3844e5475befdd3d5adc365a48dbfb2c2e02e0e32c03716fec595490716e407bc0a5960f994d1dfba5e77149ef39164ad8ec79d4c4b671d2c0383cfcb6e04d3ae8299b6510713603034881bc6471efd9d32ce1cf0f9bf20c2330e44e167a6fae0db6ddb78cb3f3788f78be44b9d1525916aa56364d916d2f5785e7f97416e7c20520260956f43565abf560941a99c3276c2ccf2ac8220e18f4c8d956b858c7e17e222a5b2056fd60d1ab30ab6ab81f1ecbfa3a341022700e4d17b0826aebdc7ef040d7f09746fcd4c382b38e7a8c16d937323284865c6e63663197c79b18017107af8739d22f1109f5edd46451981343e5ac4159375e0cdf0efeade73485b801855cbc87eb25268d2b92977d11e33c9108c805406c4cb192152630a0c4fb3bc9bf60b8c727ef612a4a04436fc10e505585221eced1774d99aec4f5f8759839046dc07a15fa3018423d9cc70a7fe5ea8cc1dcf678548d5bc0d8c8222870db2c79084a8ad6a35fb20ed6ddd209f0dc74fcdb980262d72c83e8b39371d8bb395de517a0db001214b611a2429bb2263c5a30e533dd7cbc0e696276005d407df8d7c25ba2f41a4b1986591f8c27e60999c01ba1695ac5a59d45e57a1c5c090ddbc58f550367a9de7f3ce997c1de9ae0b6ee25b688c1463ebda07f02dffacb951a8f47a9c479b336571e4cc79db0705bfb82f124888c0a41f52f60c8cc7331d030b3d235e48bb5f56111c3d4aab079526acf00f9943ed4fd0cef79d27f974ddf74ddb3e681c5e5fb981f718be46cc0a2b08ad984a1624516cb4da865885eb5fd76730cfcd1ddc637a7534b386072649dbe65dcd641f5de413766c1f8f899cf876a5223d0a723526731cab59d0e226b036c075a7ce82eb7da14cf9e672b6d4478305834a272a89cb0f52828d024dc6111d28436d19075a0b684e77749de3e5292737742598199edeef3126cabf7bdc2b26dd2aaee3c7104b53e26aa8903da3d617948ced17e21e6799816d55d386015da5f34db3aab39b43b4baf936f7ebb53b0c778f346dc91183a73224c75637415645941fc7379ef41d5446f1215a1f468c822dd00144fe4ad603e55000cf878deeaef4f7ecc70189bd866705fda852d1a642ee9c040d084d61bf9e0b2fc860e12daf54e14e618054b426afb86a222ab08d8a42192880bda347527d543953aecb04d11b958b83e2b14254487614ae547a7ea55bfeb3892c8e00468c492549075abb2c4fb5bebd5e88f9e19c4e0dcceaee7663f35c7ba34b055a63b3f19a3aa9a2f52c885dd57c0417913fe8ed6edc51c51f94ad6f1f64ba66fd1cec7241310e8bd377d00381e50f9ed7b49b3eb35ce1f2d9edee7dbf579131564684cfc885c0dca1ad5762366d4e1f913fc81c968cf101b4e38444c7b15ac4cc9f15c51d50a30e18f0af75e2723594e27a3d6984dd3a3f20d3c1b9d9f68943b5b5c9e8f9e3c87fe01893d7f6a6e148a4aa624d01c690286baaf7fa482331af71b14500721b91f0dd152549f480216c393bc79e291f651a42d6a3df8d85fcc3ca360b6c224529207035a96461a15151b2aa4889d10096bbce000e3ef3d43f3217637075b0cfa5e9a12ba55b87f7767c5ecf4e19712ecde55209078e2dcb0bbe328be8a50c4488e5197f118ba681d7ac721f4e3a4a1016098a5c5d582af348778216649c636602ab9105f27ad32eb2ae8a63890bf1cace0702889a0d0e042a3611f45ff50f958392399a63863c42330ed2a3307b428f6a185fa730a18960f7091ee3b2551ee453022eed36e16ddf1b662d1b068a630145cc355064c51dfc0114741391082900a95555fe0e609da116c4a7981072893797ae97749580ffd8c558e22617b82087c7edde5ef8bb94fbbe85542caa7bf85dc0cd0d549469a7bda1a5136b509ee45060bb6fd6f67b072c8a1a2801372cc6418bb5b29e15aaa95ffc2765a7fa5959689e855ac307faf6056dfcb87e797e1e13915c3c8fb7b9688044d83bfcda6dd1d20ffb94a6ea45ffae2fcfd4e23442d72705066f5b883a1c54351efeff63779de8eb1ada95f1e8ec0da49adbca8c793ac7e08140fcf4a5f40fbcb2f506bcae4509258923524e58ca6c8d2417be425db1ea83fa063cf6ef3987579d728694caa5ec225f44e805161d9d78983907d1213160a972a6dc5c464628460873198d57cb719d29441553f6ba2d9ae8c91f4244650b037343446bcdc82ed26d0b2c67e9085a04395bfee6dbfe3de85698aa42be4511998cd152a3b07cffc08b1479f1c7dcab6bd9cdacda76dbdd42941f50d4e56c1e9f819f2180c06190603fdff1fa21108eb16bde56760c518aa890d1c7e4fc1fe990fa2052cd401e37a4dfadfd7eeb89a0047e6161d9bc3989fc7e14038b038d46fc52c2388677dbfc61e9f5e04e66880057754c18bff9eb7db5f7b94779448834a4a92ae8d4f5bd2b4fcc0e5c304d48e0b181bce6488cad7a8c0b8233202dcd12ee77822ad06c13d62acfa000534ea24acf9d6927c89d710133c9acb0c0eeeacbf5bcbb9230300966150aaead944487440c4a78a9473f6508d6c07bfc258f1299789fa1ee22620ae453bced290451e9e8ad4d1da6daa80ffb3db5103ba7aa68626263e08c90604ce537074a5b0f51929823c87a0844019f8865eda61b0464d91277a13a3271e872ecf1c6a7b058fdf61573f57fad922e61786507c7e0647358a83d48e073d765e516e38ac6e9800583e7d76f49190e624bdccd08fc487977495a7d11d305cb7169eb2f0fd974927f63ee026c29b8b38d94560699fb2d0d14a813c61a1361c35949d7951b9fb390d2ad16b9ff7c22d3dafb1b18083a77da5e50da4cee11749fa11ce252c8086ca1020fdd0e732e7c70d01a33960fa1e4533a65a7413ee8f151e4f1a62022b900386ed7c5e6c042bd8b1c4dbdf0e0d53b26df0c77c55d377d4f3b3f11cbcbc738aa7a884812abe1e036ecde98087b6b2f76c63c7dd2a38a1486043f5798a04bb5064d969ab1a74bf592be0db57d701f2b7c30c24c0aca94c65e8a39d580d9072372cfd6663bbbb68e293c160dc5cad5fa04ce090998c739eb6b6a5d43d560343fd96ccd6ce18937c75fc5a3dd6d8c350997c5272d74b8c1fcd97b520c67d182fe104612b5344abead7ca75ebc7f3e50be5a0e9df37fa19dba89152df485e68be55e2d93698f9470897e14e3f27866e384bfb0bc3e00da524972f212afeab605b963540e6558be5feb20d92b095066cb93602e48fc2fc0bba4e45ccc8c2d8beff05aeb3acd1c9d47a8fb3d52a7add97a3244b0937c7f11a927a348379d7a0f4d15786fcfbe0982438ff9fcb5cb2d4e0ee756678d76bf94d6c24c4ab2f957b87bce6e29010c1b4bcb42b1f715632135510c93e1198c477d497c25ac2412c02c2db36ff374de868363dbf5c38300960cd52cb295595f05dd99d8e0341069bab2e3ea5beea6b656a66e14937b658af8f5abdbda31df3fc0d215d8379cbadad4b7d7345b3a5d4ae5eec1060e68f3b7fa0dfc8752f9688a566e7d3085ef84407326eeb9bc501411f8ff4f3fd8fa8d830c5dd6f058b6d5d0b2601847ff532bc77d3f50639a33a893ad59f350abcecedfa8e6fe7f20bcbe8b772bb42b5c9ac45a1939db6e12c41c5b5859896f3278a2d31618b8fd0502fef0e72fff1af23514f7c34d9d0b04f1c75d6beb448d02ae634f95b4771763c94a1cac1af6e33106df088335baaff956448be9de015792668e48f9099cdef8d3c0524b044d2d27a3ad4595da45897b6ba6f05c9a2ad488735a2503955744827c7b3a2bcdf0b31734d55edc6d358fa74add7c0ae7cdc0c5becc18d525d26aa0986c8959d0cae428c2d2fe2b34aab22970cc80e71cc7b8963552385ae3d343652d7668158ab51", 0xbc1}], 0x1, 0x0) clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x0, r2}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0xb, 0x0, &(0x7f0000000000)=0x250) ptrace(0x10, r0) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x40000004, 0x0) [ 226.692252] input: syz1 as /devices/virtual/input/input292 20:08:48 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getpeername(0xffffffffffffffff, &(0x7f00000045c0)=@hci, &(0x7f0000004640)=0x80) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:48 executing program 5: r0 = open(0x0, 0x0, 0x0) getpid() ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000fa8}) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x4, 0x2a, 0x101, 0x9}, 0x12, [0x34, 0xcde2, 0x92f, 0x1, 0x6, 0x7f, 0x2, 0x8, 0x7, 0x10001, 0x6, 0x2, 0x3f, 0x6, 0x80000000, 0xca2f, 0x800000, 0x6, 0x6, 0xfffff800, 0x401, 0x5, 0xb533, 0x101, 0xfffff001, 0x7, 0x800, 0x5, 0x0, 0x3, 0xff, 0x9, 0x3f, 0x107, 0x3f, 0x7, 0xffffff79, 0x0, 0x1800, 0x101, 0x200, 0x5, 0x9, 0x3ff, 0x74, 0x2, 0x6de2, 0x5, 0x6, 0xcc1, 0x7ff, 0x401, 0x0, 0x3, 0x8001, 0x1, 0x40, 0xfffffffe, 0x0, 0x6, 0xffffff93, 0x1, 0x7, 0x1ff], [0x10001, 0x6, 0x2, 0x6, 0x3, 0x7, 0x7, 0x6, 0x8, 0x4cbecbf4, 0x7, 0x7ff, 0x80000000, 0x10001, 0x3f, 0xff, 0x0, 0x4, 0x7f, 0x1, 0x80, 0x754, 0x7, 0x3dff, 0x26b, 0x1, 0x8, 0xffff, 0x0, 0x3, 0x0, 0x3, 0x76, 0x9, 0x8001, 0x10001, 0x5, 0x4, 0x8001, 0x6, 0x6, 0xffffff7f, 0xc69, 0x1, 0x80000000, 0x4, 0x1000, 0x1ff, 0xfcde, 0x7, 0x63, 0x4, 0x3, 0x8, 0xffffffff, 0x1ff, 0x9, 0x3, 0x0, 0x0, 0x7, 0x7, 0x7fffffff, 0x23], [0x40, 0x9, 0x100, 0x3, 0x20b, 0x8, 0x80000000, 0xffffffff, 0x6, 0x7, 0x8, 0x398, 0x5, 0x1, 0x8, 0x10000, 0xe59, 0x948, 0x10001, 0x404, 0x400, 0x5, 0x9, 0x3, 0xe9ff, 0x10001, 0x1, 0x3, 0xe2e, 0x80000000, 0x5, 0x4000000, 0x6, 0x0, 0x4, 0x1000, 0x401, 0xfff, 0x1, 0x4489, 0x3, 0xfffffffc, 0x27, 0x7, 0xff, 0x7fff, 0x8000, 0x7fff, 0xffff, 0x7fffffff, 0x5fe3, 0x1, 0x7fff, 0x8, 0xae2, 0x5, 0x3, 0x5, 0x4, 0x4, 0x0, 0xe9a, 0x7fffffff, 0x4], [0x7f, 0x1000, 0x21, 0x1, 0x0, 0x2cfadf0d, 0xfffffffb, 0x2, 0xdf, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7, 0xe59, 0x20, 0xc5, 0x4, 0x7ff, 0x7fffffff, 0xffff, 0x2, 0x2246, 0x1, 0x1, 0x5, 0x1, 0x0, 0x28, 0x9, 0x7, 0x8001, 0xbd66, 0xfc4, 0xa80a, 0x7, 0x8, 0x4, 0x2, 0x0, 0xc7b3, 0x5, 0xff, 0x0, 0x10000000, 0xfffffffc, 0x1ff, 0x80000001, 0x8, 0x8, 0x18, 0x1, 0xc97, 0x4, 0x80000001, 0xff, 0x200, 0x7, 0xfb, 0x3, 0x2, 0x6, 0x8]}, 0x45c) 20:08:48 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000400), 0x1fd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = request_key(&(0x7f00000005c0)='cifs.spnego\x00\x1f\xbf\xd1\xed\xc4C\xab\x88\xa2\a\xd8G\xff\xe8\x82\xca\xdb\x91$\x94\xcdF\x82\xf1\x10\"[\x857b,8', &(0x7f00000008c0)={'\x00\x00 ', 0x1}, 0xfffffffffffffffd, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r3, 0x0, 0xfffffffffffffdc1, 0x0) add_key$keyring(&(0x7f0000000900)='\xac\x82\x1e\x88?\xf5D\x9f', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$negate(0xd, r2, 0xfffffffffffffffe, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000d40)=""/219, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x8, 0x70bd26}, 0x1c}}, 0x0) r6 = socket(0x9, 0xfffffffffffffffd, 0x8) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinu\x8c/avc/cache_threshold\x00', 0x2, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1d55) getegid() setgroups(0x0, &(0x7f0000000200)) r9 = getegid() setgroups(0x1, &(0x7f0000000200)=[r9]) getgroups(0x0, &(0x7f0000000240)) fsetxattr$system_posix_acl(r8, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000680)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b) ftruncate(r7, 0x80003) sendfile(r1, r7, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x3}}, 0xe8) 20:08:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff, 0x9f}, 0x0, 0x0, 0x7, 0x441571bd7edd2f9e, 0x0, 0x0, 0x1b}, r3, 0xffffffffffffffff, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffff000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x2}, 0x1c) socket(0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) fcntl$setpipe(r1, 0x407, 0x401) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r5, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 227.282704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=11201 comm=syz-executor.0 [ 227.299897] input: syz1 as /devices/virtual/input/input294 20:08:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:49 executing program 0: syz_genetlink_get_family_id$team(0x0) mmap(&(0x7f00004cc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) fcntl$setstatus(r0, 0x4, 0x46000) keyctl$set_timeout(0xf, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000200)='\x00', 0x0) socket$inet6(0xa, 0x801, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000004c0)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000680)={0x800}) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)='/selinux/mls\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000005c0)='bdev\'-\x00'}, 0x30) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x26d) execveat(r0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='[(vboxnet0#nodev*vboxnet1eth0[selinux\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='bdev\'-\x00', &(0x7f00000002c0)='}vmnet0\xfd\x00', &(0x7f0000000300)='bdev\'-\x00', &(0x7f0000000340)='/selinux/mls\x00', &(0x7f0000000380)='\x00'], 0x100) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000440)=@secondary='builtin_and_secondary_trusted\x00') [ 227.476035] input: syz1 as /devices/virtual/input/input295 20:08:49 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) r0 = memfd_create(&(0x7f0000000540)='\x00', 0x17) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r2, &(0x7f00000003c0), 0x8) fallocate(r0, 0xe, 0x6, 0xffffffffffff5a11) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x3f, 0x0, 0x5, 0xfffffffe, 0x0, 0xfffffffd}) syz_open_pts(r5, 0x0) close(r5) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000080)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x8}) r6 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', 0x0, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x800fe) sendfile(r6, r7, 0x0, 0x8000fffffffe) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="017e9581f5007490c646c9ff0825a6fe7d48ad3be620d90bf2822d", @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x0) 20:08:49 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x8ac4, 0x4000000fa8}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x98428d57a99b5f44) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) pipe(&(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000)) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b1b5d2f3ead6cf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) ioctl$BLKPBSZGET(r10, 0x127b, &(0x7f0000000200)) dup2(r8, r9) perf_event_open(&(0x7f0000000180)={0x8, 0x70, 0xa2, 0x1, 0xf, 0x7, 0x0, 0x173e, 0x1010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x81, 0x5, @perf_config_ext={0x5, 0xffff}, 0x43, 0x6, 0x8, 0xd, 0x0, 0x6, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x2) io_setup(0xc, &(0x7f0000000100)=0x0) io_submit(r11, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}]) io_destroy(r11) 20:08:49 executing program 0: io_setup(0x0, &(0x7f0000000080)) open(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) 20:08:49 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@dev}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 227.816251] input: syz1 as /devices/virtual/input/input296 [ 227.848909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11288 comm=syz-executor.1 20:08:49 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) [ 228.567527] input: syz1 as /devices/virtual/input/input298 20:08:51 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x7, &(0x7f0000000180)=[{0x4, 0x81, 0x1, 0x1}, {0xfff, 0x0, 0x7, 0x8}, {0x1, 0x1, 0x2}, {0x1, 0x1, 0x6, 0x4}, {0x1, 0x1f, 0x80, 0x7fff}, {0x80, 0x7f, 0x1, 0x2}, {0x3, 0x7a, 0x9, 0x45f}]}, 0x10) sendto$inet(r0, 0x0, 0x276, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3b) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) creat(0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) write$binfmt_elf64(r0, &(0x7f0000001640)=ANY=[], 0xf5aab446) 20:08:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=[@acquire={0x40046304}, @request_death, @register_looper, @clear_death], 0x3, 0x20000000, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x80001) ftruncate(r1, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) fsync(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) quotactl(0x5, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f00000002c0)="b7a4d9dd6ff566bd0dca24201f1a414b8f141202498c71830fce4b3c") mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f0000000680)=ANY=[@ANYBLOB='mode=00000000000000000001000,mode=00000000000000000100000,mode=00000000000000000000004,euid<', @ANYRESDEC=r4, @ANYBLOB=',permit_directio,smackfsdef=group_id,fowner>', @ANYRESDEC=r2, @ANYBLOB="2c7569643c623840eb26c715ee6b5dd8116179aa7889fa15e15b51936ee79a0e09d6a9314eb378cdc850da3d25e7ee2ef970b083827cd38043c898b57986e4bde816e19c4422bd7eef62121641dc6121116e679b4915c279102ad6313e9714dd0ec4c1c4ffe3697f317fd8d706a3d48746a0effa3fc6361ca1a8b2240f35096b610adffb4feb1b155ca98d4fecfc2d38769cdb7980a719bdb1ded34d060bb7c51a2d87237599c382c04a2a864fa96cebb547bd0ede22485cad51832faf84fa9a49ace8d1666bc5329bd7c30230bc66b72376d6724b4c4165dda2b85a3862b65abcb20f6bfcacd95b869a", @ANYRESDEC=r6, @ANYBLOB=',pcr=00000000000000000055,smackfstransmute=,\x00']) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$nl_route(0x10, 0x3, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 20:08:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:51 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000060101ff"], 0x8}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x80000000, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r9) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) 20:08:51 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) [ 229.744563] binder: 11311:11318 ERROR: BC_REGISTER_LOOPER called without request 20:08:51 executing program 1: socket$netlink(0x10, 0x3, 0x4000000000000004) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000480)='asymmetric\x00\xddd\xadR\xcd\xf0\x9ac=,\x814\xe9\xd1*c\f:\xe2p\x96\x0e<\x80\aY\xed@\x8f/\x0f\xedDVQ\xac\t\x8d\xbf\x91\xa2b]IG\xc1\x87r\xb0\xd69\xb1\xbdar\x83k\x0f\xa1Uj\xa0\xc6\x0e\xb3u\r\xaa\xad\xab\x7f4\f(\xea\xd2\xcc\a\x1f\x9a#\xa3#U\"\xa6\xf38\x80}\b\xdfE|\x12\xf5F\xd0F\xc45\x9b[\xa1D`I\xd4+\x1el\xb1k\x1c\xd9\x82\xa9B\xef\xbb\xf4\'%\xef\xb6\xfa\xcd\xd6O\x85B\xb5\xd4;\x93)\x8d\x85\xce]\x9d\xcb\xc3\xe5J\x16\x88\xd2!Rf+v2[\xef\x18\xc4\xacG9\x13\xcaa6\xaf4CH9\xf0\x99i\x05\xe0uFR3\a\x04\x9e$T\x80U\xcf\x94\xcf\x14^\xfc\xb7', 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000580)=""/170) r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x0, 0x80, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x10, 0x3}, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x39, &(0x7f0000000000)=[{}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x39, &(0x7f0000000000)=[{}]}, 0x10) [ 229.903726] input: syz1 as /devices/virtual/input/input300 [ 230.051293] input: syz1 as /devices/virtual/input/input301 20:08:51 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x420000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r1, 0x11, 0x0, 0x9000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000]}, 0x45c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendfile(r2, r1, &(0x7f0000000100)=0x8, 0x89aa) 20:08:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:52 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) 20:08:52 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:52 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) 20:08:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0xfffffffffffffff8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@initdev, @in=@local}}, {{@in6=@initdev}, 0x0, @in=@local}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000003c0)={0x1, 0x4, [@local, @random="3148cd0eae0e", @local, @random="b26e9dc257b4"]}) r4 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x882) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) dup2(r6, r7) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x005t\xea\xdca$\r\x01\xf4\x10\xfd\xf0\xcc*\xf3r!\x04\xe5\xc1@\xf8\xee\xe2\xab\xe2\xc7s\x04\xc1y\xe7\f\x9a\x7f\xd9\xb2\xfb\x03\xf0\xe6\xc3O\x1ai\xa6\xc0\xfd\x9f\x8b\x13\f\x13M\xaf\xf1\xd0\x81Z?F\xfbM-^a\'\xed\xfe\xcc\x9b_\x83\x99f\x93C\x8f\'g\xaeq\x92GFu[\xf5\xd5\xf0\x924(\xe1\xdc\x81\x86C\x7f\xb1\xc4\xfb\xb3e\xa4\x94\xfcYI\x03\xaf\x19\x9bp9-PG\xe5\xf8{v\xe0\xbb\xe4\xef[\x9b\xc3\v\xc6;4\x18\xbb\x83\xdc\x13q\t`\xf1X!\xf5\xb9\xdc\xf6 \xc4\x04\xbe\x14\x16DI\xa1<\x97\xecb\'>f\x8c\xd0\xb0e', 0x1, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, [], r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100026}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=@getlink={0x360, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x918, 0x1000}, [@IFLA_MTU={0x8, 0xe, 0x1ff}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7fffffff}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "85a84f71cbc7c510"}, @IFLA_VFINFO_LIST={0x298, 0x16, [{0x60, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb97, 0x100000000}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0xce6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, [{0x14, 0x1, {0x7d, 0x91e, 0x2, 0x8100}}]}]}, {0xec, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xad3d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xaf, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xe20, 0xfb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, [{0x14, 0x1, {0x2, 0x56e, 0x100, 0x88a8}}, {0x14, 0x1, {0x2, 0x909, 0x8, 0x8100}}, {0x14, 0x1, {0x0, 0xa2, 0x3, 0x88a8}}, {0x14, 0x1, {0x80000001, 0xd91, 0x3e, 0x18aa8}}, {0x14, 0x1, {0x8, 0xe49, 0x2, 0x8100}}, {0x14, 0x1, {0x8000000, 0x607, 0xf, 0x8100}}, {0x14, 0x1, {0x1000, 0xf99, 0x80, 0x88a8}}, {0x14, 0x1, {0x4, 0x3b0, 0x7, 0x4928}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10000}}]}, {0x70, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x20, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xbed}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0xeb6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x4c8, 0x80000001}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x9, 0x10000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @link_local}}]}, {0x18, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7}}]}, {0x2c, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xccf, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5}}]}, {0x10, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0xecd7}}]}, {0x84, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7f}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0xb167, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x3, 0x6}}]}]}, @IFLA_PORT_SELF={0x54, 0x19, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/loop#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa23974eb8b48696bf3b7272f20f31e3"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "648a1c16b102c1e9f7badcaf77760abc"}, @IFLA_PORT_VF={0x8}]}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0x10000}]}, 0x360}, 0x1, 0x0, 0x0, 0x800}, 0x20040010) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r9}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x61) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r10}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r10, 0x4004556b, 0x61) write$uinput_user_dev(r10, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) write$input_event(r10, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x200000, 0x0) r12 = fcntl$dupfd(r10, 0x0, r11) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@empty}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) sendfile(r3, r4, &(0x7f00000001c0), 0x20002000005) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000c80)={'veth1_to_hsr\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="200000003b000000b0dc9874e37835be8de1f0d18ebf89e17bce1fdbf814f7d5f68717509f2e6a45896a8b8b671fb364d5139b10052df24d700cee10abea5e507dfea8"]}) ioctl$LOOP_CLR_FD(r4, 0x4c01) connect$inet(r0, &(0x7f00000000c0), 0x10) [ 230.696395] input: syz1 as /devices/virtual/input/input302 [ 230.717905] input: syz1 as /devices/virtual/input/input304 [ 230.800458] input: syz1 as /devices/virtual/input/input305 [ 230.837031] input: syz1 as /devices/virtual/input/input306 [ 230.840345] input: syz1 as /devices/virtual/input/input307 20:08:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c37dfb755c6d450726f13c9f79a076b92e304fcffffffefffffff0000000000001b"], 0x2b) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x24, &(0x7f0000000000), 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x10) dup2(0xffffffffffffffff, r1) r4 = dup2(0xffffffffffffffff, r0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000100)={0x1, {0x9, 0x20, 0xffff0000, 0x0, 0x9, 0xba}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 230.983170] input: syz1 as /devices/virtual/input/input308 20:08:52 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) 20:08:52 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chown(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syncfs(0xffffffffffffffff) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x201) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e000102000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000b3fab17708a4ef91d474", @ANYRES32], 0x28}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 231.078600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:08:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000001380)=0x2fa54f2e, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003f", 0xb}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r2 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0xf50, 0xfffffffffffffffc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001480)=0xe8) sendto(r4, &(0x7f0000001200)="46b34a8974a9ca8608b0c2cbec5c62c72c74d26bf540fcd549391d76c1b5c110f45be433f920c12f5c3b34f04121c90eb349032b7ef75837c5a7f63c28b9def652713b3651e69558c3a927586e1a0c89dc544d775341f640910a14fc2a214b54bf827c7c6be67adc87a8bc028f3dec288444dc704976cb0e34881c", 0x7b, 0x4000000, &(0x7f00000014c0)=@xdp={0x2c, 0x6, r5, 0x23}, 0x80) write$P9_RSTAT(r3, &(0x7f0000001400)={0x65, 0x7d, 0x1, {0x0, 0x5e, 0x8, 0x8, {0x30, 0x0, 0x4}, 0x3800000, 0x9, 0x0, 0xfffffffeffffffff, 0x11, 'security.SMACK64\x00', 0x0, '', 0xd, 'lo@#/)[cpuset', 0xd, 'security.evm\x00'}}, 0x65) keyctl$link(0x8, 0x0, r2) creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) [ 231.132748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.169033] input: syz1 as /devices/virtual/input/input309 [ 231.209157] device lo entered promiscuous mode [ 231.215400] device ip_vti0 entered promiscuous mode [ 231.223387] device ip6_vti0 entered promiscuous mode [ 231.231696] device sit0 entered promiscuous mode [ 231.239405] device ip6tnl0 entered promiscuous mode [ 231.248846] device syz_tun entered promiscuous mode [ 231.254682] input: syz1 as /devices/virtual/input/input310 20:08:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xc) ioprio_set$pid(0x2, r4, 0x2) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0063970172252dab7cb04702db5300fac475b593ca4d7f61a3e6d9451ec7036ab4eb8a5206b031376ec8121e40ebcecc9a414b0000000000000040167900b8721bc2597f2cb74bc5f172ac3886427d4144a6df5b12e888b4ad4bbe2294175e21950698b20bcf0023ab284776ce181100000000346b91655ab18ba5471d2b752120e21a"], 0x44) close(r2) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) 20:08:53 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180), 0x4) [ 231.459773] input: syz1 as /devices/virtual/input/input311 [ 231.543429] input: syz1 as /devices/virtual/input/input312 [ 231.560398] input: syz1 as /devices/virtual/input/input313 [ 231.583086] input: syz1 as /devices/virtual/input/input314 [ 235.958573] input: syz1 as /devices/virtual/input/input315 [ 236.739254] input: syz1 as /devices/virtual/input/input316 20:08:58 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:08:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b46dfd70e370146d0e02f8e63ba8863cd7dcc6760253ef", 0xfffffffffffffe61, 0x400}], 0x20000, &(0x7f0000000080)) 20:08:58 executing program 1: add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$setpipe(r3, 0x407, 0x5) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8fff) 20:08:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mkdir(0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='\ftmpfs\x00\xe4T#\xc2\x98s_\x8d.\xaf\x8e\xf0\xa5\x94\xf7J`\xbe\xac%o\xda\x89\x9c\"\xa1<\r\xd9Y\xe1\xc0\x038m//`\xb0\'i\x98\x03\xef\x02f\x0f\xe1^&\xda\xb2\xfdP\x8f\xcd\x01\x80\x1fZ\x8d\xf1\n\xe4\xed\x90\x8a\xbd$\x8d\xf5o\xa3\xf6\'vY\xa9\xab\x00\xd6\a4\xf6;>4\xd2Q\xdd\xb8\xe6`\x81', 0x0, 0x0) inotify_init() creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000280)) close(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x8000, 0x100) r4 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @multicast1}}) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f00000001c0)='./bus\x00', 0x6, 0x0) r5 = socket$inet6(0xa, 0x80d, 0x0) close(r5) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000002c0)=0x8) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./bus\x00') r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)) sendmsg$key(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2, 0x6, 0x2, 0x9, 0x2b, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x1, {0x6, 0x3c, 0x9, 0x15, 0x0, 0x8, 0x0, @in=@loopback, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_lifetime={0x4, 0x4, 0x81, 0x90c, 0x0, 0x100000000}, @sadb_address={0x5, 0x17, 0x33, 0x80, 0x0, @in6={0xa, 0x4e21, 0x6, @empty, 0x1f}}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@mcast2, 0x4, 0x34, 0x20}, @sadb_key={0x13, 0x8, 0x450, 0x0, "6b465eec13f9a82bf4e88e8153c36dbba4f0c15438270a2610da3b6beb650679d3aac90658e89d3b431675d0af120a73fa5e1354fb90659c624b8ed6bea4412565fe2f4fe627b549090cfb709b5b56f0e66daf2f8cd950699464a11c7a7fca824992e7b71d43053edb6ec4ae17ef6d298a7b2dbe9fd17311347b9a5ea52b60f8d3a903713577f6b7777d"}]}, 0x158}}, 0x40000) ftruncate(r6, 0x200006) sendfile(r5, r6, 0x0, 0x8000fffffffe) 20:08:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 236.924498] devpts: called with bogus options [ 236.992476] input: syz1 as /devices/virtual/input/input319 [ 237.003455] input: syz1 as /devices/virtual/input/input320 [ 237.100560] input: syz1 as /devices/virtual/input/input321 20:08:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1) close(r2) truncate(&(0x7f0000000000)='./file0\x00', 0x100) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) 20:08:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 237.331572] input: syz1 as /devices/virtual/input/input322 [ 237.397501] input: syz1 as /devices/virtual/input/input323 [ 237.476659] input: syz1 as /devices/virtual/input/input324 20:08:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) 20:08:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:08:59 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 237.660299] input: syz1 as /devices/virtual/input/input325 20:08:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 237.713248] devpts: called with bogus options [ 237.722873] input: syz1 as /devices/virtual/input/input326 20:08:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) [ 237.913061] input: syz1 as /devices/virtual/input/input330 [ 237.973380] input: syz1 as /devices/virtual/input/input331 20:08:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) [ 238.056281] input: syz1 as /devices/virtual/input/input332 [ 238.152164] input: syz1 as /devices/virtual/input/input333 [ 238.216159] input: syz1 as /devices/virtual/input/input334 20:09:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:01 executing program 4: memfd_create(0x0, 0xa6179bc3745eb40c) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x17524010eb995776) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100), 0x4) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000002c0)=""/226) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x40) pwritev(r5, &(0x7f0000000440)=[{&(0x7f0000000640)="49d9f3af7bdc9b99298eef26c1ba28274fa53c61ebd100000000800000000ce78a4f5f23d73df275e2e3705afeafdfbedbfa8b0bcab85526226740edacda37bc447d91029a2c9bb846d9195183e7d0458ac60216f53caa961cc08e0c9b1963dd3246bf2c8e9b2c", 0x67}, {&(0x7f00000006c0)="b0ef913113d90b38ea6bc92a1eccee66aacf2f16a4a859de06e58d112d914f0adabc0b65cbe304e09606d8f8033a11ae06e76d88024314f9db4ebd2efc366a30405acd114f0d56606fe15a22161ce6784ffc696981bafcab152d0b60289da7245a43abe7b1a61db13fecfd6754d81ffbe323944fb51df30bcfc64f0a0b6678cc58f0a73ab88c52a90e7ba35da9befd762f7a799d27386a69e781d0ec74e1229504d70398d7bb291d4004cd11c1e2e5b69495c1b254e122f79f8ce1ee78ae19b0250855a740e4e53ff62c97", 0xcb}], 0x2, 0x4) fgetxattr(r5, 0x0, &(0x7f0000001d00)=""/4096, 0x1000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000000c0), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[@ANYBLOB="500000001500d3930000000000000000ff020000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(0xffffffffffffffff) setsockopt$inet_buf(r7, 0x0, 0x0, &(0x7f0000000080)="6ed846e2dfe5f2b686727578", 0xc) fallocate(r3, 0x0, 0x0, 0x84003ff) write$eventfd(r0, &(0x7f0000000280)=0xffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @rand_addr=0x4fb}}, 0x0, 0x40, 0x0, "30bbe9a78470f1d6562884859d3d21581250a985bb9752242eb7a7a6f318e3fc177d7c894a31fe14035ed658eec7efd703aeaf50f1fbceea95e691e624d356be9b000000000000000100"}, 0xd8) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10040, 0x0) ioctl$GIO_FONTX(r9, 0x4b6b, 0x0) getdents64(r8, &(0x7f00000045c0)=""/4087, 0xff7) 20:09:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x14, 0x6e, &(0x7f00000000c0)="e03b7e109d22772cabbe5422423063a698068879a2eabf62d3f2598f720b1c1b2c7f142c68e7b7403a6b8d887502d2cbec1b5261e4ac79c3e62203de2541c9680742c870753246dad9b51e7675d8574b17de90e233c32569b5d67fb2321361caa26328789ce2df49b0df0208114f"}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x800, @multicast1}, 0xffffffffffffff2d) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, &(0x7f0000000140)}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="eabe9f303b222957eecbce24877c82838273804212b18d7c4ca85e87a64820546a1e9ed56adb1b30410bd88528f20851587978e30359f8cf068dc3cbc3d5013ed6063b91e7f1ffd7e4ab56ad8e3980f40b61a0bf7a156db58a5d1a000000000000000000005dae3ae984ad0f6eb1cdaf089757eb9e25ce5a484a02aa943396d090346aadf9aad4d2a992608df2e5d8e39b7bc412f3146a93c15f2bfa00d9830cd4f796541024bfad4e154265fe5a9f3de70e8fe0533de6f8a2a521bc8b9553afcadf3ffcfe4b63c5574b5f12c22b2f19fe6f1203982804b1d695a6ee00000000000000", @ANYBLOB="e6c55c3df4e86601000000010000009b2861343d72748d52864e01000000002ee70a67757310554a9ca66864eef1c8c72be40825f38b6c78f0bebc3176300000000400000000000000bc31810c25a2fc4d1153e55bc2fdfd711337bf1a3014f87159f469c30ae6b94f07fefb66764d49d14ae837f7"], 0x0, 0xe7}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 20:09:01 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r17, 0x1, 0x0, 0x6, @dev}, 0x14) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:01 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bdev\x00', 0x0, 0x0) [ 239.645649] input: syz1 as /devices/virtual/input/input337 [ 239.723525] input: syz1 as /devices/virtual/input/input338 20:09:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x61) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @reserved="6c0e5f44d9ff22a7637f516c61edda8d7646ceba132357dea6d0a02bedf78299"}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$PPPIOCSPASS(r0, 0x4008744b, 0x0) 20:09:01 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff0300540000552331fe0500fac9067f13675ab4f2", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x565}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0) r5 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r7, r8) getgroups(0x4, &(0x7f00000002c0)=[0x0, r5, 0x0, r8]) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x5, {0x6, 0x0, 0x8e52, 0x3, 0xd28, 0x7fff, {0x3, 0xff, 0x8, 0x4, 0x8, 0xc1bb, 0x4, 0xfff, 0x81, 0x7f, 0x3, r4, r8, 0x200, 0x6}}}, 0x90) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000280)={'lapb0\x00', @ifru_mtu}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 239.863241] input: syz1 as /devices/virtual/input/input339 20:09:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="281f000018000500000000000000000000f6626d", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x3}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x61) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write(r5, &(0x7f0000000240)="ffafa0a0355d7f22b132b6bc3032ce68db1bd90b023d8e292a3dc05ba266c821528bf5ce3198f9ee24b4660cac1925bb1a2d473e268143613ac4df0421afb337edccb456", 0x44) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @broadcast}, {0x306, @broadcast}, 0x8, {0x2, 0x4e22, @empty}, 'veth0_to_hsr\x00'}) [ 239.918772] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 239.928458] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.937830] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 239.959013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 240.233323] input: syz1 as /devices/virtual/input/input340 20:09:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:02 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:02 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 240.419186] input: syz1 as /devices/virtual/input/input342 [ 240.498863] input: syz1 as /devices/virtual/input/input343 [ 240.563066] input: syz1 as /devices/virtual/input/input344 [ 240.774272] input: syz1 as /devices/virtual/input/input345 20:09:02 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 240.904182] input: syz1 as /devices/virtual/input/input346 20:09:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) listen(r0, 0xfffffff9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x6, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x100000000000002) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') [ 240.973482] input: syz1 as /devices/virtual/input/input347 [ 241.092271] audit: type=1400 audit(1573762142.819:52): avc: denied { create } for pid=12071 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 241.098660] input: syz1 as /devices/virtual/input/input348 20:09:02 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r17}) r18 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 241.128891] audit: type=1400 audit(1573762142.859:53): avc: denied { write } for pid=12071 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 241.160808] audit: type=1400 audit(1573762142.889:54): avc: denied { read } for pid=12071 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 241.199051] audit: type=1400 audit(1573762142.929:55): avc: denied { create } for pid=12071 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 241.223856] audit: type=1400 audit(1573762142.949:56): avc: denied { write } for pid=12071 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 241.274750] audit: type=1400 audit(1573762142.999:57): avc: denied { read } for pid=12077 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 20:09:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) memfd_create(0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x2, 0x4) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0xfffffffffffffffd) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00'}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 20:09:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r2, 0x0, 0x8800000) 20:09:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:04 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:04 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r17 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:04 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) [ 242.624419] input: syz1 as /devices/virtual/input/input350 20:09:04 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) r3 = perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x70, 0x6, 0x8, 0xff, 0xf, 0x0, 0x7, 0x84cc0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0xffffffffffff8001}, 0x8000, 0x1, 0x4, 0x4, 0x183, 0xff, 0x4}, r2, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x1f, 0x80, 0x1, 0x46, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000400), 0xa}, 0xa120, 0xffffffffffffffe2, 0xffffff80, 0x2, 0x15a, 0x5}, r1, 0xc, r3, 0x9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$unix(0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r4) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x100, 0x0) sysinfo(&(0x7f0000000000)=""/50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r5, &(0x7f0000000980)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x100800}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f0000000540)="50879d7cf189a13afdb3dda2b34f921a5d1ccb0423a37fd8981092a5d5588160ff70e5a53036f1a5521223ee01fae4f50ecab57e484dffa2d8b319b9b367ac1afd5ad0ee418612e99dee1a55e6c1007dbe1fe462ff5573", 0x57}, {0x0}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x246}, 0x8000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) r11 = accept$inet6(r9, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f00000003c0)=0x2) sendfile(r8, r7, 0x0, 0x7fff) ioctl$int_out(r7, 0x0, &(0x7f0000000100)) [ 242.689921] input: syz1 as /devices/virtual/input/input352 [ 242.705369] input: syz1 as /devices/virtual/input/input353 [ 242.790241] input: syz1 as /devices/virtual/input/input354 [ 242.799323] input: syz1 as /devices/virtual/input/input355 20:09:04 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mount(&(0x7f00000001c0)=ANY=[@ANYRES16=0x0], &(0x7f00000000c0)='./file0\x00', 0x0, 0x12e0094, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000080)={[{@mblk_io_submit='mblk_io_submit'}]}) [ 243.066448] input: syz1 as /devices/virtual/input/input356 20:09:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00\"\xd6\x81I\x00\x00\x00\x05\xed\x00\x00\x00\x00/\xfaI\xce\xf0dgX\xb5\x95\xa9e\xa3\x14\xb0w\xb3\x9d\xec\xf7\xca\xf5\x1a(q\x0f\xeaf\x89\xe4\x00\xad[_\x9a\x03\xa0mh\xdd\x8eRb\x1f\xa4Z\a vo\x86\xd8\xb0\x84]\x04eDB8J`\xbe') lseek(r2, 0x9c, 0x0) sendfile(r0, r2, 0x0, 0x9) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000080)) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4108a020}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x19c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x2, 0x2, 0xffff7a1b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc7e9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0x1, 0x4, 0x3780000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10000896}, 0x4000) 20:09:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/55) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1}) 20:09:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x80005) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0xc0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x223, 0x6, 0x0, 0x3, 0x0, 0xd7, 0xfffffffffffffc00, 0x0, 0x0, 0x2, 0x0, 0x7ff, 0x0, 0x0, 0x400, 0x7fff, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6cc, 0x0, @perf_config_ext, 0x2010, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x1c0) getpriority(0x0, 0x0) ftruncate(r0, 0x8003f1) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)={0x0, 0xffffffff, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x100000000}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[], 0xff0e) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) r6 = socket(0x15, 0x2, 0x3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r7, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0x1e0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x600) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$P9_RSTATu(r9, &(0x7f0000000200)={0x8f, 0x7d, 0x1, {{0x0, 0x7a, 0xfff, 0xfffffffffffffff7, {0x0, 0x1}, 0x0, 0x3, 0x1, 0x100000000, 0x0, '', 0x2, '$,', 0x39, '-&@,posix_acl_access)em1em0(ppp0[self#userlo,\x9fmd5sum$bdev', 0xc, 'keyringppp0$'}}}, 0x8f) getresgid(&(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000580)=0x0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x0, r5}, {0x2, 0x2}, {0x2, 0x1, r7}, {0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x9}, {0x8, 0x2}, {0x8, 0x4, r10}, {0x8, 0x4, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x1004}, {0xffffffffffffffff, 0x84d9ebaaff6c62c3}, {0xffffffffffffffff, 0x4000}], 0x3, &(0x7f0000000200), &(0x7f0000000240)={0x6}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r12, &(0x7f0000000340)=ANY=[], 0xff0e) ioctl$int_in(r12, 0x5421, &(0x7f0000000080)=0x1) splice(r11, 0x0, r12, 0x0, 0x100000000, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 20:09:05 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r16}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r17 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:05 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000078002b0074000100000000810a0300"/71, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000000000000000000000000000000100000000000000000000000000000000000000008001b00000000005a3baacafecfb5452d0adf8a83ee2ff6c326c52b30ea0fd35f"], 0x5}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/78}) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x74004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 243.499693] input: syz1 as /devices/virtual/input/input358 20:09:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x80a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x82fa40, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}, 0xc) sendto$inet(r1, &(0x7f0000000000)="388c46b3e074e53df3a418c97f387cb54e4ab934108d1bb3f80931", 0x1b, 0x4010020, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}], 0x265, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 243.679397] input: syz1 as /devices/virtual/input/input359 [ 243.740254] input: syz1 as /devices/virtual/input/input360 20:09:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 243.818530] input: syz1 as /devices/virtual/input/input361 [ 243.923245] input: syz1 as /devices/virtual/input/input362 20:09:05 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 244.054949] input: syz1 as /devices/virtual/input/input363 [ 244.078309] input: syz1 as /devices/virtual/input/input364 20:09:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x9) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:05 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r17 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 244.231078] input: syz1 as /devices/virtual/input/input365 [ 244.253198] input: syz1 as /devices/virtual/input/input366 20:09:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) r0 = socket$netlink(0x10, 0x3, 0x15) open(&(0x7f0000000080)='./bus\x00', 0x80200, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000001c0)) capget(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r1 = socket(0x10, 0x3, 0x74) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') link(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 244.343532] audit: type=1400 audit(1573762146.069:58): avc: denied { create } for pid=12223 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 244.350363] input: syz1 as /devices/virtual/input/input368 [ 244.373859] input: syz1 as /devices/virtual/input/input369 20:09:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) clone(0xdff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f00000011c0), 0x89, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x98, "b2519eedc0f636947f1ce2118fd60712e913b0e196c6a4e3d0395f099252905471d20ea3128cc6dc6db5533b2c5a4247fe155885fef4be9e8cf675832e63d9c1f350eef8201223d975bd8f3e09195d6f7ae42bdd96534d5ac801bcfce900eb504edbd0850518000ecdb6bdaacee27d6e6b013ad04782a360148273b748309414fd3819fea1e1fdc4bc7efeff3fc63825c567e3aaaf96f1fa"}, &(0x7f00000000c0)=0xbc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x61) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$setpipe(r3, 0x407, 0x7a0) 20:09:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:06 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001280)={'gretap0\x00', 0x1020}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x22a780, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000012c0)) pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x61) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x463, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x7b0b1971, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x239a]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz0\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="2800400010005fbaebc9ee320000000000f6626d4d2850d059e1b97c4b9f9e834708ac9375589c0d6bc46171567ba7dad1eb381e3eac27615bd6cafe9325359b90308fa876aff83b2cd6949b9fc13f2ddf5a25c62b726b6ffc507e56599fcebc0183e004d5752bad8edb1e910947bdf342bdb2e91a6ba72224869f781ca87f40002e0acb33e51af25ee80af41a2b3b0a26f676a890853eb7fd4457800973ca8929ef72fe8582f44701c0439da8b5ca7cd5bce9ae52149a6732040f5b18326b64a2a1d2e72ccf309b7b532f2192061c911bbc36eab183ed1052fc36638b1d20b0409a31767dd9a133676e", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES16, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="3bfac935e1dbab4e2d7fac1b4397117809e097999f8425583d6cdcb23561c80e38719fa5d51ce623d84289d8", @ANYBLOB="11e3996db8306baab3d1fb9d2f7d35d7441ccc057b04a455fe5fb118eba524e373945a1543c704166d5260557019fe05a48ee4f07024af182060e4589e113c1642a4a0bbd2e0bd428c4e9ac4d972016356108d906fffd12ea1bb9a57b1736ef3c86ae5fc7bea70e6bb2d8cafb9b9675f216b225d4f37051c86f66334ba9fcf5dc5f628c936c7abe4427b313060b51366601808ef33b2e2cc47ca974b70b01c9f8da16abc70a7ae054745998cc69dfe26d624119996baea9ac73bf629708258919f0a5139b0ce289d3990bd9b18a35595a08ace84fc91125ad00ed66aae5ca5a1fa857d2682e72dbc80781128e6eff7339caf3bb9ca3a2a09dc386ad1d28640051833e56dda84ce34a42c0d233a43c9a8f412690144c17a2786cf1521fad87f0b4c06e720f492a594486b71c101d335e6e4b5cf033427ec7c520769d90b300ebf1dd897fd4940cb0b5ef39201941c64e2ea8579332eda2bdd3a1b583db523a816b3a11bb6990bc484c654928af7e4d04190bba35fedbe28bd141110980f95f239c61f8542b0fb7514627b014c2143ad3731755e72dbe56bfd507beb4fbee6f4ef871ffe36ec0a9406cee76702d4b0e96037678952986d6afc58d5bcc183edc59397fd8cb611f1d92275108c572812c32b0e20b55cc19fa5b0eea79037ed31ab493af35f8c673ad9a8b31700a9e80302f3a2caa0d5b290905d80bb77e7952f49d11d03138ac3c2e6051a7ae127044831485f9ad1109052743a0fbc5364e4bffa3c9457aeb175f0a9b41768ee2335ff48ab4746d01d02d03ef3c2c8188c0499e4aeefc54d69a2b94c45babee41c0f6df81cf88e783dd26626efe3a07d6bad397976c584f332649a85dfaf36b987baebfaec3380a696ba3d61c3e3786d7e2f1bc844d6ebd0e726f1d5960f756680b20e9b97c7aa0ff5665f13967546d39f5d5d5af0dcd23031539827f84beb3fc5c1c0494aff14b06e36bd3835c1693f197542a4b2ca1c64043c0853252ae485757aea4ce6ffba5bdbed160e6019d94547f6f86f882236eaeb246d84e72c20d7f1ec00980c6142e3933e490620734a62705904a390940d86107c6195d7a219473e84935520f52e9caa44ad5cae4010a352aa5ddad053b0d382dfb8f0aecacc576b0839549bc663dbaa42884a79c3eed39c7fdaa04331c46d5205308cbf6cd3f0ff7bfccc815d2a7f17a3cdc3297d248fb6a34f721150defb52c1a09acb1bf1c3b7af76e16d882f8638f3dec10caec457b35f39f647f21ba19b2860d1aa2f55396f516501adf9a5ef050e136d279d794e71b0c0cdb86f5fa75936326b7189074868bcc23f457656055f0c7f766214a328f5e869d6fdec1bcb4979fb41ff8a54f336fd4684346e6d7b51c365c667373a7d950b6d23120684fc0bd6622a71db1b25668ba430a1fd81a9c5d0906bd463176f96d7e1f01f2b6079cf9ed24fd508da4c37214364daf71d5f1e7de65dedac5fdacb2b4a27ed1e82e4ad9c1ed0d1becd67cb656d89e8f1080d95228468df555b03459db3828f8e25ef43e41c31fe90c398bba082cd430dd19920e2958d0c7ae4ba862fc5cde98471b542d98ad3dda35f4b94ffd497d1ab21ef8ba536dba9886f55a877aab276c436e0fc289d93d9759ce88db2a7e53e8ec238a46b6754937247e13e083614f172460e91be5b5828e681965ddfa9dcc647e89c7abf5c214f120773f5a1353805ca6a886af9915e2599cd2be2e0e355097e92b28586dabe2578f7d22352c58a5a1f3f55a24298fbd6dc9ebb2fa3a604ebbd157a626beaf89fb7afbb82c4e5950d742eb2fc5ef888b6bfa2dc3156212bf034dbceaf8dd708113f47f4c27ac5f62ff75c229c27d10c88d231d455b5783126a7795dd1c3ab7feaab03145ec4d4f5ac1edcf43203a66c94ff2d4cf04635bfe4d171b92e8ceb3ca448f334f2c04312625093e21681786c3026c2223f1984e5c318201cfaef353814ee47b2f6f2d9a5eb827fa3ce4495e4a576dfda5de1cc4579d9a0e12385731657c84839676853ea1702fb153ed4f826c06763475d3ad4b7711bf15db25f8185d54c763839ad51ba2ca4423b5d1a59273c41d6be226c83a2c13451a27c48ba9d0ceaf1818a1cd62b48241f2edbe65885ee7ab2672389547283000e4463b5b0c0984f2b106cef715f744a656eb095d75b82a700187745042b0b637a8dbe7bd55b9c5ae798c59b2d1e180cff2447aacfd69365327ef208fff9649d73ade501ee3943c34fc7dfc3d88b37aba3853434ee1c5b05d06aa003f576f32dc8a1c5c26e7acfac6fc423d13754eb444a415701dcc1457f952a5536251e0a80b0b260fcdf65198f018d4e8941710345fcceb819c007f6e1551317637cc197f38f14c552ac743a0079257711645bd39ec9e3c63fb671a71b6004daea3697f8e89c1cf7d36204a0a521e9762208be3ce3d133373c335e2935980b370d4523654e93cee094f502afac967e35cc1ef967f8154dcb19dc9412a9d27e33320214b90b5dc499423aecf7365cf06f5a9d45e5ca0fa002bf0dd8a71ae589ef15cc37a65ce6df2d0cb6266e8a1af5baad7d09f575ebe48650d9faf46986ca78a9f1369cabbe85ab2269f54f8b3756d0b8935919a3f215ef7efcc416e27e7e6a86c7c4484d2506f11f2d8ed40ac0532e859802ea21e0c400bd4a25397289a11a44fd2888c612facf2e09ed008c7457a51a2c541566a24dda310967374b645642c6ba67187da3ce926498aab2faf6b4d7ec5929e073e8c1176bbf4173684c6a6badd0492c4557f770b27c5bba9a4f53c41efd98e88ccbb29d6f40922b63c76103fb08cbd65dffcb236c75474c70e78efe10b330a5e4f2611275789b788f86f460011198d308da38d23e30335c5be33ae6871d1917b5209b989168fb535a7dba2b44110f61d628c1008444e3241e531e3740cff9dbe99744f98734f36844483c613d4f3e3e4618682d41eee6e5e5ea10e74fd4395bbcd9996b03a7577001f25be0242b175a28e755cb9f3f951342f2eb6ddce53c0eadbbd59bc87ab035d423379832b1a46564af9e40d519e680210a4e3c4763163488eb5aa49e059c53330b6660a41490f18813874ec96b4d2a871244191b51f212bc03d7028180f3af836496b7cc624d56a815ad8486e68fede32c703ca301bb8e7787aff84d74c1da4fc5a589ea3c0718983e2baf7cd559212cf116ea446c0c10d32bb8e4e3736b29a283fff27bd24a2435f9b7b4bfe9b39bf2b4fe05c45de5369ceba07889afd74ebc5fbd241c1f1502b4d1186ffa9609a07544f3dc34024ef232095ffe33e26d18bc2a8a2c7c6335476fb777d9ef89e49ffec37e088037b7375494e38109d50190b7641e43ea648e44b98073dba6f09f8dccf261b57d6910e169c9ea15d878e6b0f9cbe1003a138b99f58de9e152efe93a50c9dde4153ca61a514935ee1ad00e5006ec82f82e7e00c1f20d967d0e9354278b8adb1ef3fe2e34e39e03064b8d812fa8057ccae1e09a3f37c2f5f7300f55fe70d6921c50cf4d6e366d156aceac2001768446b43acb8a82a07256dd023a754e4ea76ac0b53f526ebbe5195db8e40da4868334dca5ac858ab3a1be1c7d8e266520575beb4ca4b2be0cf7112373005d1be85c20abd60d892b8e945c53f5e569729e1024db21b507a1cd676f87af8dc16c68d647eee500d9abf2fe2dcc737b2fdeff4b289be0ad091a39d0caed518a027426f323801a180abf118c6722b23d325c73f14ba661037b446555190444a243fa0b861ea6c78ccbe60a2aca6e59bb9c0503180221d033ef74303a86701645572e838c2b1a34547bed32b97677dc01b5f33b17d3d2cc67dabc9a8c799a256503561ae66a004a0a58561c3969a345e1a1c321947359b01eee48fb0d5dbe71e1442921a86ec4cef434b21ed5adeb84b52c410cc5c18e1850ff136dfb16f4e29f8ea959b5070fd44630da814234e2c8050e94b6ca9d502e97be428d8ba43f9d703da9cab70e284e99fa5bd3b97b970902ee41475899c3ad929b01b23d8da9c7b6bfb93843990e1829ce9fe0f816ec5d08afee5d7fc18b5bf111acd6aae2113fdfa4d261ff3da36d2bd13e13f1858ad60526f52825f9e8ddff4fa6abb105f1d1898cefbc311668c5760530167dc5149b4d43b93eff6352a9157ffdf06929fd51c7d4592f8e457f85067b5e2ca81376fafae556f10295ac51ec8ccf82163a804dde916c585a5bbe365bac933d0d681f8ac4f3d0497b9ce86a5aecc120064f411b2c919a8f0295ae6c3cb7e3d5e4efafad5b1c95f3fe8d8401740e85fb53c3c8bc9205332e8fbdef0d1811f2200478258837c6193335d4fb0d027b147985497f704935b79a33957f30c9d7f6048282d44ef36ead7f5cd35ef79c0831c8e92449432a0465c58e0dd38f38143c73081b8fe43d050e60a3034f4d6a978985fa55cfd06bad3571925c6638e17bc44e95c7609f6644c429bdea894820e9de352415f88b34200e5149d0d0f5672ade3b0805fad63bfc2affe00d381dcc18d397850574a15db9ab9086ee485382c172fb1e359c7881a6d4a5582a252c8e20b52ff7956501fd6e0b4a1583afc55bac9d5ce938edbd7f3a055ea300bcc1b29f12e95712acc1cebffe56672263753541f6ecea75a8fdb83194b3912465e15cb0e81d5c5505f505899f211f18c2d97c62413e71cba0c97186414a02618a57e8d5ac7f999f9d8a8b8de0ff9e351e056559974ee2288e60110c564b0d8c459d1e11d2046240f4b6931c8f56ee21a1522b4e260676d4a8fe706c102a871d25248e4b82378afdfd2e72e65fc468b2d8967e4519ccb9dd1ed4de0063ff0ee28afef7230950f2d465d0dc0f0f7b38e53823437cbc97b0bc1efb79756867eb0d7e629169dc1cc8b1cdb196f4356e98ef2661eb6cf9ccad71627d504b172a51124939642f971dde2f757b1d5307d3e2fc9750fecc33a6b4816c6a27f2973043fd60ae1502584f61da0a77496ef637740bc632c7e2b58fae6badf90488fefebabacb79f433325f15e8c670d2126123f811a96b5dbbdd9030d34fffdb5c7ba2b7cb6aae654be45879f1187f5bdede9ba5c097e5047c12b9e7b92a627e5cd65c9c869f79f226799e9d2444bbf2ac9b58e0bbf9815402e7b6f312ee50d228108ee373221661b14a79ca3f913b04a39a9fe8762b3d35816c86b0b08634f58c19959863bfdb1193bf9e15394d6709959a97948d1254d5ee288cd3c722583f8a8f6b4f96dcd52b7445a6bcfa004900de3bf774be9cb777cedde53757960ab7a454d872e73d90f974f1f3227c42ce2a86bda986b84a2bb5297d2de53ecedbc0e27dc4bd6c44b83adc0258bcad0ca18b3644e10114f3c8d9f33d60545cb04573746dd744ad29934b9a7a3b94230d0bb3b01884ec020d4d3a672e5095b2614716a6b7ba4d1e3d378c12ebd42695d44d6ee7a690256691c65b03a7ce9066af98b9603d829c62814a8516656acb937bf8217db33e7efffbd5bbe81364134622fdec865f2d7c469d55323c20430cf808f4da714a2fa7a54c9e79a3f0bc456b0803c145ee9c0072ce1312e10006264d3a12c2d68cb7cab7692434a9e2a1c7a39a5f7460e1a823da2b3166a7f28acdc87db675cfe07d8df1e90723517bbc7b64f970b51009c21499e32b03f90668e3348609f01669bd8a4a7ebcd61240abd1405120ce8e85cc8c11b7414fbe796f014a0fabebcf5eb5aaf68f8834f674b315dba98616f49e2fee80768531b60f0612220d4639a8e206c66b0e1400446727acf7a05e56cadb6a96353c717dd284", @ANYPTR, @ANYPTR64, @ANYRES16=r7], @ANYRES64=0x0, @ANYRES64=r3], @ANYRES16=r4], 0x3}}, 0x0) 20:09:06 executing program 0: r0 = perf_event_open(&(0x7f00000007c0)={0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r3 = fcntl$dupfd(r2, 0xe09, r0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x1, 0x1000, 0x98, 0x8, 0x17, 0x4a, 0x9, 0xff, 0x6f7}) r4 = creat(&(0x7f0000000580)='./file0\x00', 0x0) sendfile(r4, r1, 0x0, 0xc0000008000000b) [ 244.609165] input: syz1 as /devices/virtual/input/input370 [ 244.739984] input: syz1 as /devices/virtual/input/input371 [ 244.839540] input: syz1 as /devices/virtual/input/input373 20:09:06 executing program 4: r0 = memfd_create(&(0x7f0000000340)=']\'\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), 0x8) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x0, r5}) accept$inet6(r4, 0x0, &(0x7f0000000100)) ptrace$setopts(0x4206, r2, 0x0, 0x0) gettid() r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x63e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) fcntl$getown(r6, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r9) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000040)=0x0) tkill(r10, 0x3) fcntl$setstatus(r1, 0x4, 0x80000000002c00) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 20:09:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:06 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r16, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r17 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:06 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 245.094501] input: syz1 as /devices/virtual/input/input374 20:09:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 245.200935] input: syz1 as /devices/virtual/input/input376 [ 245.209114] input: syz1 as /devices/virtual/input/input377 [ 245.247041] input: syz1 as /devices/virtual/input/input378 20:09:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 245.343319] input: syz1 as /devices/virtual/input/input379 20:09:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) setitimer(0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000400)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) write$P9_RFLUSH(r2, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0xfebb) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$setstatus(r0, 0x4, 0x44800) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r4, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r4}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r7}, {r8}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, &(0x7f0000000240)) write$P9_RREMOVE(r6, &(0x7f0000000280), 0x1033b) fdatasync(r6) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200, 0x0) faccessat(r9, &(0x7f0000000480)='./file0/file0\x00', 0x1a, 0x800) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r10}, {r11}], 0x2, 0x0, 0x0, 0x0) r12 = syz_open_pts(r11, 0x80000) ioctl$KDGKBSENT(r12, 0x4b48, &(0x7f0000000000)={0x8, 0x0, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r6}) [ 245.491068] input: syz1 as /devices/virtual/input/input380 20:09:07 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) unshare(0x40000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x50, r0, 0xb8cdc000) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) write$9p(r1, &(0x7f0000000280)="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", 0x1fb) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) [ 245.585542] input: syz1 as /devices/virtual/input/input381 20:09:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 245.681066] input: syz1 as /devices/virtual/input/input382 20:09:07 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x81) bind(r2, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80) syncfs(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) epoll_create(0x0) timerfd_create(0x0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@ipv4={[], [], @dev}, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@empty}}, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) [ 245.779368] input: syz1 as /devices/virtual/input/input383 20:09:07 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000240)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) [ 245.818179] audit: type=1400 audit(1573762147.539:59): avc: denied { wake_alarm } for pid=12308 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 245.846701] input: syz1 as /devices/virtual/input/input384 [ 246.454384] input: syz1 as /devices/virtual/input/input386 [ 249.444493] input: syz1 as /devices/virtual/input/input387 [ 250.197196] input: syz1 as /devices/virtual/input/input388 20:09:12 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x210800) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) clone(0x1340000, &(0x7f0000002080)="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", &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="6c46d82ccb599f137fd113166d4719f31043b2339634392c4af767f0") ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) getegid() unlink(&(0x7f0000000040)='./file0\x00') syz_open_dev$loop(0x0, 0x0, 0x0) lgetxattr(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d2e2974727573746564707070302a656d31736563757269747909712fc1"], &(0x7f0000000680)=""/61, 0x3d) io_setup(0x8, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x40) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) 20:09:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:12 executing program 4: r0 = memfd_create(&(0x7f0000000180)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf\xd6\xb2n\xe1\x82\xd6\xb3\x1a\x98H\x06l\x0e\xa0\xa23\xba\nB\x87v\xaa\xe0\xec\xcb\xaf\xe7y\x87\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xcd{1uj1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0U:\xe3\xc3\x92', 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb90300060000000000000000b7380000000000000400000000000020008c"], 0x2d) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, r1+30000000}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x2000, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 20:09:12 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000240)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:12 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xffffffaa}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x0, 0x104}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b68af3", @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b3"], 0x0, 0x14d}, 0x20) tkill(r3, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 20:09:12 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) r1 = syz_genetlink_get_family_id$nbd(0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000380)) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r4, &(0x7f0000000000), 0x1c) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) r7 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r7, &(0x7f0000000000), 0x1c) r8 = dup(r7) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10000, 0x200) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030c2cbd7000fedbdf25050000001c00070008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x4008008}, 0x24800) execve(0x0, &(0x7f0000000280)=[&(0x7f0000000040)='selfwlan1\x00', 0x0, &(0x7f0000000140)='\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='eth1cgroupmime_typeppp0^em0\x00', 0x0, 0x0, &(0x7f0000000400)='proc/\x00']) geteuid() [ 250.374106] input: syz1 as /devices/virtual/input/input389 [ 250.475024] input: syz1 as /devices/virtual/input/input391 [ 250.533429] input: syz1 as /devices/virtual/input/input392 [ 250.556188] input: syz1 as /devices/virtual/input/input393 20:09:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:12 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0xa, 0x3, 0x2) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000280)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000150b000000000000010000781100"], 0x10}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000001c0)={0xfff, 0x401, 0x0, 0x7}) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x1002, &(0x7f0000000580)=ANY=[]) request_key(0x0, &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000006c0)='user\x00', 0xffffffffffffffff) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x19, 0x0, 0x80}}) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = accept4$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x800) getpeername(r5, &(0x7f0000000300)=@alg, &(0x7f0000000380)=0x80) [ 250.657059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=12612 comm=syz-executor.1 20:09:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) fallocate(r1, 0x0, 0x40000, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x11800, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'memory'}]}, 0x14) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0xfffffffffffffffd, 0x4000008}) [ 250.874616] input: syz1 as /devices/virtual/input/input394 20:09:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) sendmsg$nl_generic(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x444000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2f, 0x200, 0x70bd2a, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="dd3d1f240a0002"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 20:09:12 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000240)}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:12 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getitimer(0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r0, 0x48280) write$binfmt_elf64(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x350) open(&(0x7f00000003c0)='./bus\x00', 0x40000, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x24211}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000380)={r4, 0x6, 0x80000000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x31e, 0x5) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x3153b527}]) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x20000) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f000030e000/0x3000)=nil, &(0x7f00003f7000/0x3000)=nil, &(0x7f000023b000/0x4000)=nil, &(0x7f00005cc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, &(0x7f0000383000/0x400000)=nil, &(0x7f00003b8000/0x2000)=nil, &(0x7f000001f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000026f000/0x4000)=nil, &(0x7f0000000100)="7cd2b1c1385f76982e36ed21a23549bd2ad478aea4d533a9bde260ce10248c50e3a59576d40627665e7632780eb153b4f4bb0dcf7603f6e91107b1850c45a36660c788f7ca67", 0x46}, 0x68) socket$inet_udp(0x2, 0x2, 0x0) 20:09:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 251.331675] input: syz1 as /devices/virtual/input/input397 [ 251.343986] input: syz1 as /devices/virtual/input/input398 20:09:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/iD7\x94\x01P_routk\x18W8UN\xd2\x9d\xee\xa6\xd1\xb6(\x14\xad\xf9\xf0G\f\x9d#:\x80f9\tl\r\x12\a\xf5\xf1\xe6\xd8m\xda\xb7n2Y\x02\xd3\ay\x82\x9f\x9be:rK\x19\x8a\x1f\x86\xf8\xaf\xe0\x03B(\xe2\xc5\xa8\xbbX.\x8a\x9f\xa9\xeas\xffH\xde\x18\x9e\xda\xbba3 \xb9\xe4jykV\xea\xe3\x8d,)r\x13\xf6\xa7\xef\xda\r\xb8ct\xf4\\*:\xcc\xcf\xa2J\x03\xb3\xae1\x8e/\xb0o\x16\x0e\xbc\xb3F\xc8\xcaD\b\xa6rFhmD\xd1!\x86\"\x906\x88\xb3N\x04\xa9-P-\\\"d;\x8b6\at5\x99\xc1=\xb6Vm\xb6\xe7\xab\xe4\xe6\x87Jr\x81\x80\xc4VX-\xb6j\xf6u\xe5\x8f!\xae\x1c\xd1\x11\xdd\x12H\xd4G\xbd{|\xe2\x87aZ\xc07\x8aKq\x88*\xa7\xfc\xe49') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0xc0000008000000b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x3, @empty, 0x1}, {0xa, 0x4e20, 0x400, @remote}, 0x0, [0x0, 0x7, 0x2, 0x2, 0x8000, 0x2, 0xfff, 0x7]}, 0x5c) 20:09:15 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:15 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) write$P9_RCREATE(r1, &(0x7f0000000000)={0x10, 0x73, 0x2, {{0x42, 0x4, 0x7}, 0x3}}, 0x18) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8fff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x200000) fcntl$setflags(r3, 0x2, 0x1) 20:09:15 executing program 1: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) r0 = open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000380)=ANY=[@ANYBLOB="0000cc00b03ff739d5b86b44ae237ca700f330564427346f47a8c38af9c7edfa96a63a4872f16e82ed2574786ac14d59fc9200ceb0172747008adeb40cb33101000080fa2b0926a8a03bf93f7c895ed5a14f6be3164152848fa4b9a5ff5ea39e240d8c1cb59b3dc4869ffebf9fbfae763cc409b876eddd09ae717e3ca66d6e16a8e2ecc098b389f01d6072712ec6922801000000000000008faba0684d50fd4584928805fc3ab3284938e3d87dfbae1297bdaa17971a8ff54956c1e6f5e3fe150a22e29c01006eb97667861a6f77310fdfab"]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) io_setup(0x0, &(0x7f0000000100)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) unshare(0x60000000) fcntl$getown(0xffffffffffffffff, 0x9) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) dup(0xffffffffffffffff) [ 253.358593] audit: type=1400 audit(1573762155.089:60): avc: denied { map_create } for pid=12670 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 253.409663] input: syz1 as /devices/virtual/input/input400 [ 253.448264] input: syz1 as /devices/virtual/input/input402 20:09:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 253.636932] input: syz1 as /devices/virtual/input/input404 20:09:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:15 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f3030303030303034303030302c757365725f69643d0000000300"/42, @ANYPTR64=&(0x7f0000002780)=ANY=[@ANYPTR=&(0x7f0000002840)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="12044c36a4cf15bc011aa06de2cb446278ef4d55efa8166e02bc8ab1980336a07333f76e1ee5794a9230aae5e9cece8897aff74406689d216a87ccff7289658dc6aeaa00", @ANYBLOB="8d8c1d0e5f5c6017cf28cf4ce3b1228fa9a692de5e24e417a67bc4578dd6737626af054ba0b8e5c590f3ba5cdf91acd20f1fa297424a570d49c48621d6ee4372a4b29984b94b7c9db37a8a3c0a", @ANYPTR64, @ANYPTR64, @ANYRESDEC, @ANYRES64], @ANYBLOB="8f7880fb1eb7da85611d054c2af81aa1090c8199d31ea63e1b9945c21b593d8857e0faae7c6aca27bf281e5f08c7330abd168e9b9ef356119b5acf0334af4a56fada465b4bc83f189c179bc3ee3ac606", @ANYRES16, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYPTR], @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES16=r0], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0]], @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0/file1\x00') read$FUSE(r1, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r1, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r1, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/239) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) [ 253.813152] input: syz1 as /devices/virtual/input/input406 [ 253.823771] input: syz1 as /devices/virtual/input/input407 [ 253.898562] PPPIOCDETACH file->f_count=2 [ 254.570114] input: syz1 as /devices/virtual/input/input409 [ 254.626900] PPPIOCDETACH file->f_count=2 20:09:16 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0x277, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x86335000) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 20:09:16 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r15}) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:16 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) 20:09:16 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000003, 0x9, 0x28120007) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x44c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={0x0}, 0x20, 0xb7d, 0x0, 0x1, 0xfffffffffffffffc, 0x80000001}, r5, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/mnt\x00') 20:09:16 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x2, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f3030303030303034303030302c757365725f69643d0000000300"/42, @ANYPTR64=&(0x7f0000002780)=ANY=[@ANYPTR=&(0x7f0000002840)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="12044c36a4cf15bc011aa06de2cb446278ef4d55efa8166e02bc8ab1980336a07333f76e1ee5794a9230aae5e9cece8897aff74406689d216a87ccff7289658dc6aeaa00", @ANYBLOB="8d8c1d0e5f5c6017cf28cf4ce3b1228fa9a692de5e24e417a67bc4578dd6737626af054ba0b8e5c590f3ba5cdf91acd20f1fa297424a570d49c48621d6ee4372a4b29984b94b7c9db37a8a3c0a", @ANYPTR64, @ANYPTR64, @ANYRESDEC, @ANYRES64], @ANYBLOB="8f7880fb1eb7da85611d054c2af81aa1090c8199d31ea63e1b9945c21b593d8857e0faae7c6aca27bf281e5f08c7330abd168e9b9ef356119b5acf0334af4a56fada465b4bc83f189c179bc3ee3ac606", @ANYRES16, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYPTR], @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES16=r0], @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0]], @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0/file1\x00') read$FUSE(r1, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r1, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r1, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/239) ioctl$EVIOCGREP(r0, 0x4004743c, 0x0) 20:09:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0x88) getsockopt$inet6_int(r1, 0x29, 0x35, 0x0, &(0x7f0000000280)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet(r2, &(0x7f0000004780)=[{{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f0000001f40)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002900)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev, 0x64, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000300)='fdinfo\x00') prctl$PR_GET_SECCOMP(0x15) r7 = getpgid(r6) syz_open_procfs(r7, &(0x7f0000000240)='net/igmp6\x00') getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e21, 0x7fff, 0x4e23, 0xba3, 0x2, 0x80, 0x80, 0x3c, r4, r8}, {0x1000, 0x1f, 0x81, 0x7ff, 0x0, 0xffffffffffffff61, 0x9, 0x1f}, {0x7, 0x7, 0x7, 0x83}, 0xff, 0x6e6bbc, 0x1, 0x1}, {{@in=@loopback, 0x4d3, 0x74}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3501, 0x4, 0x2, 0x2, 0x0, 0x2}}, 0xe8) [ 255.142123] input: syz1 as /devices/virtual/input/input410 [ 255.167282] input: syz1 as /devices/virtual/input/input411 [ 255.215413] input: syz1 as /devices/virtual/input/input413 20:09:17 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) get_robust_list(r3, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x61) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0xdb7cf937548a0e68, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000002c0)) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$int_out(r4, 0x6, &(0x7f00000001c0)) setns(r0, 0x0) 20:09:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 255.317754] PPPIOCDETACH file->f_count=2 [ 255.431534] input: syz1 as /devices/virtual/input/input415 [ 255.495221] input: syz1 as /devices/virtual/input/input416 20:09:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 255.682341] input: syz1 as /devices/virtual/input/input417 [ 255.742205] input: syz1 as /devices/virtual/input/input418 20:09:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r8}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:17 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0x277, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x86335000) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 20:09:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 255.916461] input: syz1 as /devices/virtual/input/input419 20:09:17 executing program 4: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) [ 256.012668] input: syz1 as /devices/virtual/input/input421 [ 256.039255] input: syz1 as /devices/virtual/input/input422 20:09:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 256.155212] input: syz1 as /devices/virtual/input/input423 [ 256.168864] input: syz1 as /devices/virtual/input/input424 20:09:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) inotify_add_watch(r2, 0x0, 0x48000160) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x5, 0x2, 0xa0}) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x4d) ioctl$KDSKBLED(r1, 0x4b65, 0x100) sendfile(r5, r5, &(0x7f0000000200), 0xa198) [ 256.283662] input: syz1 as /devices/virtual/input/input425 [ 256.314102] input: syz1 as /devices/virtual/input/input426 20:09:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) inotify_add_watch(r2, 0x0, 0x48000160) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x5, 0x2, 0xa0}) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000082) write$nbd(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x4d) ioctl$KDSKBLED(r1, 0x4b65, 0x100) sendfile(r5, r5, &(0x7f0000000200), 0xa198) [ 256.504891] input: syz1 as /devices/virtual/input/input427 [ 256.533352] input: syz1 as /devices/virtual/input/input428 20:09:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r8, 0x4004556b, 0x61) write$uinput_user_dev(r8, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 20:09:18 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000530407041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x4, 0x7b3a}, {0x5, 0x5}, {0xffc1, 0x9}, {0x400, 0x1}, {0x3ff, 0x400}]}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x0, r3}) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000040)=""/135, &(0x7f0000000100)=0x87) syz_read_part_table(0x5, 0x6, &(0x7f0000001600)=[{&(0x7f0000000140)="7e5be864cc59b366100268c7a0bdb61b920996072141dc4843d660ff1bc12f535af626c54b422268957be099fb715c596e44d1342b63505a5c02be8162c876ac96cb45192af07d41a53559f3fef9a622b3530022dbefebc34d720d4bbaf033ad8355eb9a23259720b6a3e86e18c105ae502b0978eacd397aa98bd7949eaabfbf01fa116d2778d5ec94935cc07db2612ee4e9f8e817", 0x95, 0x67956ccd}, {&(0x7f0000000440)="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", 0x1000, 0xfff}, {&(0x7f0000001440)="c77298105cfb7105e3dd5fae3244643a95dd0a81c65c7eb87c6e68f12bd81eabc97edcaaa731e9ba4af0d72cca28de1e1782c5273c1f23aa9b8eca09df63fa98a0499ec594a951fb79dbe4b73bfbb71d3a945e0b036100408de52ebfdfbbbc5c4ea01777bb660ea5749522de3afa38fc932411f60d165ee07081b7b7eb3c0b4a496f684b09b8f82a540a5db51dc5c6a18fec0df5804330156fa3bbc6e238c0e20a22ef5c15822c2b377d04f521f0f56a0b04831f13b5d4e0cb76af430c86ac", 0xbf, 0x7}, {&(0x7f0000001500)="8d1c3ad2705a3d4e526b13b4c218b02989d88fd2bd15cc933d2bd796701b9166e59d08de325f14979966f7f4f60b496fcb040ad9be6ebb6e9889a95023e252c857d09065f18fad974050589b963419459336b74c389a1f52731d478e9954ff612dd928866b482b91ab8dc0ff00739767e5cb7201a7c2eefdb393f577dc27b89e3697b58c602f0005ea6daea92197f2433106913ce953caf40b717cbcb9d44f247013533f46bb515e9598ad3ee0dee259efeae55a867e7faecc1d2c65c9816598555919873f397987a2e825f5df0435c176db5de314772d47ffd2b40151582ccce003feacf7c5a382c2fccdf2f6", 0xed, 0x7}, {&(0x7f00000002c0)="964a7ce8c99d0b06369e5ebf7796c1ed0d3989545af979ea9d113fa16b779cc2eef46079f161a12c13cae909c993ebc43bb4d977eda04906763cf3250a8337baac273ac62f8bea82990dcc8b45795c8ccace4312c7972316aa61fc20cb3504fbb1216e1e6577726e57906b96d0", 0x6d, 0x872b}, {&(0x7f0000000240)="9f1357834e0cb68a5ca2c57edc5c790b9f3cf7a3b358b2", 0x17, 0x5}]) [ 256.707919] input: syz1 as /devices/virtual/input/input429 [ 256.746861] input: syz1 as /devices/virtual/input/input430 20:09:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 256.834032] audit: type=1107 audit(1573762158.559:61): pid=13059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg='' 20:09:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x19a) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x61) write$uinput_user_dev(r7, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 256.875372] input: syz1 as /devices/virtual/input/input432 [ 256.934291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26927 sclass=netlink_audit_socket pig=13062 comm=syz-executor.0 20:09:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) [ 256.939782] input: syz1 as /devices/virtual/input/input433 20:09:18 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000080)={[{@resgid={'resgid'}}]}) syz_emit_ethernet(0xe5, &(0x7f0000000440)={@empty, @remote, [{[], {0x8100, 0x5, 0x1, 0x2}}], {@ipx={0x8137, {0xffff, 0xd3, 0x6, 0x1, {@broadcast, @current, 0x7}, {@random, @current, 0x9}, "ff5b656498b0a89c92d97f73a34b3bb405626b176dcf0fade0f25dd0f4fa94ff02adb773a61103ace67906f440f15797eea4c1b53b3818abde166689b38c5d635f9dafae31fab6df00d4dd2a884179b694c26f54727eefc62424d304a19f8293e089338067de4323c9b3571bf2e29fa1edddd63bff7edc42a5bd4cfdc26748363c255986df79652b2a4a70f10ad29cd0837e6917216345264be1219334f18027b560fa2eebfe3e41649f5d8dcf6f94517549517b98"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x6b2, 0x854, 0xda7, 0x4e5]}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) r6 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r8, r9) getgroups(0x4, &(0x7f00000002c0)=[0x0, r6, 0x0, r9]) r10 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r12, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r12, r13) getgroups(0x4, &(0x7f00000002c0)=[0x0, r10, 0x0, r13]) r14 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r16, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r16, r17) getgroups(0x4, &(0x7f00000002c0)=[0x0, r14, 0x0, r17]) r18 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r20, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r20, r21) getgroups(0x4, &(0x7f00000002c0)=[0x0, r18, 0x0, r21]) r22 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r24, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) fchown(0xffffffffffffffff, r24, r25) getgroups(0x4, &(0x7f00000002c0)=[0x0, r22, 0x0, r25]) getgroups(0x8, &(0x7f00000002c0)=[r6, 0x0, r13, r14, 0xffffffffffffffff, r18, r22, 0xee01]) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='fuse\x00', 0x2000022, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r26}, 0x2c, {[{@default_permissions='default_permissions'}], [{@subj_user={'subj_user', 0x3d, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}}, {@subj_user={'subj_user', 0x3d, ','}}, {@appraise_type='appraise_type=imasig'}]}}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) recvfrom$unix(r1, &(0x7f0000000300)=""/125, 0x7d, 0xa4af4cf238cd344a, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffd88) r27 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r28 = gettid() fcntl$setownex(r27, 0xf, &(0x7f0000000280)={0x0, r28}) ioctl$sock_TIOCOUTQ(r27, 0x5411, &(0x7f00000000c0)) write$selinux_context(r0, &(0x7f0000000040)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b) [ 257.097214] input: syz1 as /devices/virtual/input/input434 20:09:19 executing program 3: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x61) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) dup2(0xffffffffffffffff, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @multicast2}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x9, &(0x7f0000006d00)={@local, 0x0}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000007480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007440)={&(0x7f0000006d80)={0x1c8, r7, 0xb16, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x600}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}]}}]}, 0x1c8}}, 0x2009c014) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r13}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r14, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r14}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r15, 0x1, 0x0, 0x6, @dev}, 0x14) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62}) r16 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 20:09:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x61) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x5, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0xfffffffffffffeb2, &(0x7f0000004580), 0x1, 0x0, 0x219}}], 0x1, 0x0, 0x0) [ 429.547005] INFO: task syz-executor.2:5551 blocked for more than 140 seconds. [ 429.554490] Not tainted 4.9.194+ #0 [ 429.558702] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.566672] syz-executor.2 D25464 5551 1 0x00000004 [ 429.572503] 0000000000000083 ffff8801d9804740 ffff8801d3017380 ffff8801db721000 [ 429.580589] ffff8801d3b1c740 ffff8801db721018 ffff88019d8f7688 ffffffff8281af8e [ 429.588665] ffffffff81bcd65c ffffffff841f8b40 000060fe2460d0a0 ffff8801db7218f0 [ 429.596676] Call Trace: [ 429.599316] [<00000000c118e37a>] ? __schedule+0x6ce/0x1f10 [ 429.605023] [<00000000d75f454a>] ? check_preemption_disabled+0x3c/0x200 [ 429.611902] [<0000000088f2e06c>] ? io_schedule_timeout+0x390/0x390 [ 429.618454] [<000000001bbb943d>] ? mark_held_locks+0xb1/0x100 [ 429.624613] [<00000000574564a5>] schedule+0x92/0x1c0 [ 429.629898] [<00000000b27bd9f1>] schedule_preempt_disabled+0x13/0x20 [ 429.636503] [<00000000ed34d5e6>] mutex_lock_nested+0x38d/0x920 [ 429.642816] [<000000001403f364>] ? lo_open+0x1d/0xb0 [ 429.648240] [<00000000cd62efae>] ? mutex_trylock+0x3f0/0x3f0 [ 429.654145] [<000000007a67f7df>] ? disk_get_part+0x158/0x2c0 [ 429.660061] [<00000000a3395dfe>] ? loop_unregister_transfer+0x90/0x90 [ 429.666940] [<000000001403f364>] lo_open+0x1d/0xb0 [ 429.671941] [<000000001fb7965f>] __blkdev_get+0x268/0xeb0 [ 429.677824] [<000000007a74e131>] ? debug_smp_processor_id+0x1c/0x20 [ 429.684332] [<00000000672fb8e2>] ? __blkdev_put+0x840/0x840 [ 429.690179] [<0000000043f3e016>] blkdev_get+0x2e8/0x920 [ 429.695673] [<000000007fa66f2b>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 429.702472] [<0000000066fce411>] ? bd_may_claim+0xd0/0xd0 [ 429.708730] [<000000003c79f342>] ? bd_acquire+0x26/0x250 [ 429.714263] [<00000000286c2d43>] ? bd_acquire+0x88/0x250 [ 429.719828] [<00000000f23ae877>] ? do_raw_spin_unlock+0x142/0x220 [ 429.726280] [<00000000bb24b097>] ? _raw_spin_unlock+0x2d/0x50 [ 429.732359] [<0000000051d96ab9>] blkdev_open+0x1aa/0x250 [ 429.737922] [<00000000631db6d0>] do_dentry_open+0x422/0xd20 [ 429.743803] [<00000000d63b9848>] ? blkdev_get_by_dev+0x80/0x80 [ 429.750138] [<000000009eca0c5c>] vfs_open+0x105/0x230 [ 429.755433] [<000000006e36d022>] ? may_open.isra.0+0x139/0x290 [ 429.761547] [<000000007fd67196>] path_openat+0xbf5/0x2f60 [ 429.767201] [<0000000050a7ea22>] ? path_mountpoint+0x6d0/0x6d0 [ 429.773313] [<00000000977e42d6>] do_filp_open+0x1a1/0x280 [ 429.779018] [<00000000af699390>] ? __alloc_fd+0x1d4/0x490 [ 429.784669] [<00000000cb6d5d56>] ? may_open_dev+0xe0/0xe0 [ 429.790345] [<00000000af699390>] ? __alloc_fd+0x1d4/0x490 [ 429.795969] [<00000000f23ae877>] ? do_raw_spin_unlock+0x142/0x220 [ 429.802330] [<00000000bb24b097>] ? _raw_spin_unlock+0x2d/0x50 [ 429.808322] [<00000000af699390>] ? __alloc_fd+0x1d4/0x490 [ 429.814116] [<00000000fa936ce5>] do_sys_open+0x2f0/0x610 [ 429.819731] [<00000000efb21605>] ? filp_open+0x70/0x70 [ 429.825205] [<000000002cca910a>] ? SyS_mkdirat+0x164/0x250 [ 429.830970] [<00000000c0984351>] ? SyS_mknod+0x40/0x40 [ 429.836332] [<00000000eddac90f>] SyS_open+0x2d/0x40 [ 429.841520] [<000000007c882a24>] ? do_sys_open+0x610/0x610 [ 429.847274] [<0000000086da2e51>] do_syscall_64+0x1ad/0x5c0 [ 429.852988] [<00000000704b2ad7>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 429.860200] [ 429.860200] Showing all locks held in the system: [ 429.866515] 2 locks held by khungtaskd/24: [ 429.870767] #0: (rcu_read_lock){......}, at: [<00000000febb7b9a>] watchdog+0x14b/0xaf0 [ 429.879558] #1: (tasklist_lock){.+.+..}, at: [<000000009176e3b7>] debug_show_all_locks+0x7f/0x21f [ 429.890354] 2 locks held by getty/2031: [ 429.894329] #0: (&tty->ldisc_sem){++++++}, at: [<0000000091f5dc36>] ldsem_down_read+0x33/0x40 [ 429.903796] #1: (&ldata->atomic_read_lock){+.+...}, at: [<000000009a89bbf5>] n_tty_read+0x1fe/0x1820 [ 429.913825] 2 locks held by syz-executor.2/5551: [ 429.918600] #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000006dfe02ca>] __blkdev_get+0x10e/0xeb0 [ 429.927889] #1: (loop_index_mutex){+.+.+.}, at: [<000000001403f364>] lo_open+0x1d/0xb0 [ 429.936923] 2 locks held by syz-executor.3/7245: [ 429.941703] #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000006dfe02ca>] __blkdev_get+0x10e/0xeb0 [ 429.951081] #1: (loop_index_mutex){+.+.+.}, at: [<000000001403f364>] lo_open+0x1d/0xb0 [ 429.959892] 2 locks held by syz-executor.1/11422: [ 429.964737] #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000006dfe02ca>] __blkdev_get+0x10e/0xeb0 [ 429.974033] #1: (loop_index_mutex){+.+.+.}, at: [<000000001403f364>] lo_open+0x1d/0xb0 [ 429.982864] 2 locks held by syz-executor.4/11744: [ 429.987831] #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000006dfe02ca>] __blkdev_get+0x10e/0xeb0 [ 429.997160] #1: (loop_index_mutex){+.+.+.}, at: [<000000001403f364>] lo_open+0x1d/0xb0 [ 430.005918] 2 locks held by syz-executor.0/13071: [ 430.010925] #0: (&lo->lo_ctl_mutex/1){+.+.+.}, at: [<0000000008a5a608>] lo_ioctl+0x8e/0x1b10 [ 430.020494] #1: (&bdev->bd_mutex){+.+.+.}, at: [<00000000c83a8add>] blkdev_reread_part+0x1f/0x40 [ 430.030157] 2 locks held by syz-executor.5/13079: [ 430.035040] #0: (loop_index_mutex){+.+.+.}, at: [<00000000b9822699>] loop_control_ioctl+0x7a/0x320 [ 430.044954] #1: (&lo->lo_ctl_mutex#2){+.+.+.}, at: [<0000000045dfd24d>] loop_control_ioctl+0x17f/0x320 [ 430.055255] 2 locks held by blkid/13080: [ 430.059343] #0: (&bdev->bd_mutex){+.+.+.}, at: [<000000006dfe02ca>] __blkdev_get+0x10e/0xeb0 [ 430.068614] #1: (loop_index_mutex){+.+.+.}, at: [<000000001403f364>] lo_open+0x1d/0xb0 [ 430.077408] [ 430.079023] ============================================= [ 430.079023] [ 430.086027] NMI backtrace for cpu 1 [ 430.089695] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0 [ 430.096102] ffff8801d98d7cc8 ffffffff81b67001 0000000000000001 0000000000000000 [ 430.104156] 0000000000000001 ffffffff81099d01 dffffc0000000000 ffff8801d98d7d00 [ 430.112171] ffffffff81b7229c 0000000000000001 0000000000000000 0000000000000001 [ 430.120179] Call Trace: [ 430.122750] [<000000003a79c256>] dump_stack+0xc1/0x120 [ 430.128111] [<00000000de116775>] ? irq_force_complete_move+0x271/0x300 [ 430.134854] [<00000000a0ab0e21>] nmi_cpu_backtrace.cold+0x47/0x87 [ 430.141171] [<00000000ebcb1b0e>] ? irq_force_complete_move+0x300/0x300 [ 430.147945] [<00000000fafca868>] nmi_trigger_cpumask_backtrace+0x124/0x155 [ 430.155152] [<000000007f1ca087>] arch_trigger_cpumask_backtrace+0x14/0x20 [ 430.162189] [<000000001b43cedb>] watchdog+0x670/0xaf0 [ 430.167454] [<00000000febb7b9a>] ? watchdog+0x14b/0xaf0 [ 430.172886] [<00000000464752c2>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 430.179771] [<000000003dddc335>] ? hungtask_pm_notify+0x60/0x60 [ 430.185922] [<00000000ca93d6ac>] kthread+0x278/0x310 [ 430.191104] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.196730] [<000000007fa66f2b>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 430.203615] [<000000009efe06f2>] ? _raw_spin_unlock_irq+0x39/0x60 [ 430.209934] [<000000004120395f>] ? finish_task_switch+0x1e5/0x660 [ 430.216249] [<00000000c380c43d>] ? finish_task_switch+0x1b7/0x660 [ 430.222572] [<0000000041579f4b>] ? __switch_to_asm+0x41/0x70 [ 430.228442] [<0000000069b91ae8>] ? __switch_to_asm+0x35/0x70 [ 430.234323] [<0000000041579f4b>] ? __switch_to_asm+0x41/0x70 [ 430.240190] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.245888] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.253121] [<0000000048320701>] ret_from_fork+0x5c/0x70 [ 430.258728] Sending NMI from CPU 1 to CPUs 0: [ 430.263284] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff8282a0e1 [ 430.270684] Kernel panic - not syncing: hung_task: blocked tasks [ 430.276839] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.194+ #0 [ 430.283234] ffff8801d98d7c60 ffffffff81b67001 ffff8801d9804700 ffffffff82a7b6c0 [ 430.291261] 00000000ffffffff 0000000000000001 dffffc0000000000 ffff8801d98d7d40 [ 430.299376] ffffffff813fef3a 0000000041b58ab3 ffffffff82e32f55 ffffffff813fed61 [ 430.307412] Call Trace: [ 430.309996] [<000000003a79c256>] dump_stack+0xc1/0x120 [ 430.315355] [<00000000d9f697a6>] panic+0x1d9/0x3bd [ 430.320372] [<000000004157763d>] ? add_taint.cold+0x16/0x16 [ 430.326155] [<00000000dc03efc5>] ? find_next_bit+0x44/0x50 [ 430.331933] [<00000000f9338756>] ? printk_nmi_flush+0xae/0xd0 [ 430.337900] [<00000000ebcb1b0e>] ? irq_force_complete_move+0x300/0x300 [ 430.344651] [<000000000fadce4e>] ? nmi_trigger_cpumask_backtrace+0xfc/0x155 [ 430.351830] [<00000000ba1771d6>] watchdog+0x681/0xaf0 [ 430.357092] [<00000000febb7b9a>] ? watchdog+0x14b/0xaf0 [ 430.362536] [<00000000464752c2>] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 430.369356] [<000000003dddc335>] ? hungtask_pm_notify+0x60/0x60 [ 430.375482] [<00000000ca93d6ac>] kthread+0x278/0x310 [ 430.380681] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.386315] [<000000007fa66f2b>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 430.393229] [<000000009efe06f2>] ? _raw_spin_unlock_irq+0x39/0x60 [ 430.399524] [<000000004120395f>] ? finish_task_switch+0x1e5/0x660 [ 430.405833] [<00000000c380c43d>] ? finish_task_switch+0x1b7/0x660 [ 430.412142] [<0000000041579f4b>] ? __switch_to_asm+0x41/0x70 [ 430.418011] [<0000000069b91ae8>] ? __switch_to_asm+0x35/0x70 [ 430.423883] [<0000000041579f4b>] ? __switch_to_asm+0x41/0x70 [ 430.429747] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.435347] [<0000000006ee0143>] ? kthread_park+0xa0/0xa0 [ 430.440949] [<0000000048320701>] ret_from_fork+0x5c/0x70 [ 430.447324] Kernel Offset: disabled [ 430.450978] Rebooting in 86400 seconds..