fffffff) [ 884.659382][T10234] input: syz1 as /devices/virtual/input/input4933 [ 884.734439][T10245] input: syz1 as /devices/virtual/input/input4934 [ 884.768833][T10239] input: syz1 as /devices/virtual/input/input4935 17:55:03 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:03 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 885.114979][T10252] input: syz1 as /devices/virtual/input/input4936 [ 885.190208][T10257] input: syz1 as /devices/virtual/input/input4938 17:55:04 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:04 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x0, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:04 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 885.417375][T10270] input: syz1 as /devices/virtual/input/input4939 17:55:04 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 885.502662][T10276] input: syz1 as /devices/virtual/input/input4940 17:55:04 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 885.571506][T10284] input: syz1 as /devices/virtual/input/input4942 [ 885.638662][T10287] input: syz1 as /devices/virtual/input/input4944 [ 885.711061][T10298] input: syz1 as /devices/virtual/input/input4946 [ 885.737045][T10270] input: syz1 as /devices/virtual/input/input4943 [ 885.815189][T10276] input: syz1 as /devices/virtual/input/input4947 17:55:04 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:04 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:04 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 886.082627][T10316] input: syz1 as /devices/virtual/input/input4948 17:55:04 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x0, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:04 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x0, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 886.256077][T10324] input: syz1 as /devices/virtual/input/input4950 [ 886.346970][T10332] input: syz1 as /devices/virtual/input/input4951 [ 886.390063][T10337] input: syz1 as /devices/virtual/input/input4952 [ 886.434127][T10336] input: syz1 as /devices/virtual/input/input4953 17:55:05 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0x0, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 886.514472][T10341] input: syz1 as /devices/virtual/input/input4954 17:55:05 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 886.645469][T10332] input: syz1 as /devices/virtual/input/input4955 17:55:05 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 886.753786][T10347] input: syz1 as /devices/virtual/input/input4956 [ 886.767174][T10349] input: syz1 as /devices/virtual/input/input4957 17:55:05 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 886.867247][T10354] input: syz1 as /devices/virtual/input/input4960 [ 886.900855][T10347] input: syz1 as /devices/virtual/input/input4958 [ 886.937266][T10353] input: syz1 as /devices/virtual/input/input4961 17:55:05 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 887.132702][T10347] input: syz1 as /devices/virtual/input/input4962 [ 887.239175][T10472] input: syz1 as /devices/virtual/input/input4963 17:55:06 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:06 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x0, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 887.333146][T10476] input: syz1 as /devices/virtual/input/input4965 17:55:06 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 887.532881][T10484] input: syz1 as /devices/virtual/input/input4966 17:55:06 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:06 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 887.641711][T10484] input: syz1 as /devices/virtual/input/input4967 17:55:06 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 887.788722][T10495] input: syz1 as /devices/virtual/input/input4968 [ 887.815813][T10500] input: syz1 as /devices/virtual/input/input4970 [ 887.908893][T10498] input: syz1 as /devices/virtual/input/input4971 [ 887.946298][T10501] input: syz1 as /devices/virtual/input/input4973 [ 887.966948][T10512] input: syz1 as /devices/virtual/input/input4974 17:55:06 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:07 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:07 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:07 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:07 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x0, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:07 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 888.424268][T10526] input: syz1 as /devices/virtual/input/input4975 [ 888.445626][T10532] input: syz1 as /devices/virtual/input/input4976 [ 888.562791][T10539] input: syz1 as /devices/virtual/input/input4978 [ 888.586599][T10540] input: syz1 as /devices/virtual/input/input4979 [ 888.626411][T10545] input: syz1 as /devices/virtual/input/input4981 [ 888.664804][T10531] input: syz1 as /devices/virtual/input/input4982 [ 888.835196][T10545] input: syz1 as /devices/virtual/input/input4983 17:55:07 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x44c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:07 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:07 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 889.008258][T10557] input: syz1 as /devices/virtual/input/input4984 17:55:07 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:07 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 889.165931][T10560] input: syz1 as /devices/virtual/input/input4986 [ 889.307733][T10571] input: syz1 as /devices/virtual/input/input4987 17:55:08 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x44c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:08 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:08 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x0, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 889.567961][T10571] input: syz1 as /devices/virtual/input/input4989 [ 889.607796][T10582] input: syz1 as /devices/virtual/input/input4990 [ 889.718212][T10591] input: syz1 as /devices/virtual/input/input4993 [ 889.734794][T10589] input: syz1 as /devices/virtual/input/input4992 [ 889.797696][T10596] input: syz1 as /devices/virtual/input/input4994 17:55:08 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:08 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 889.956650][T10600] input: syz1 as /devices/virtual/input/input4995 17:55:08 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x44c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:08 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:08 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x0, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:09 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x0, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 890.190188][T10607] input: syz1 as /devices/virtual/input/input4996 [ 890.247630][T10612] input: syz1 as /devices/virtual/input/input4997 [ 890.322440][T10620] input: syz1 as /devices/virtual/input/input4999 [ 890.380616][T10613] input: syz1 as /devices/virtual/input/input5000 [ 890.423397][T10622] input: syz1 as /devices/virtual/input/input5002 [ 890.439706][T10624] input: syz1 as /devices/virtual/input/input5001 [ 890.454853][T10629] input: syz1 as /devices/virtual/input/input5004 [ 890.613115][T10607] input: syz1 as /devices/virtual/input/input5005 17:55:09 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x658, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x200, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 890.730796][T10729] input: syz1 as /devices/virtual/input/input5006 17:55:09 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:09 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 890.812789][T10740] input: syz1 as /devices/virtual/input/input5007 17:55:09 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 891.079285][T10749] input: syz1 as /devices/virtual/input/input5009 [ 891.114714][T10740] input: syz1 as /devices/virtual/input/input5010 17:55:09 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x0, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 891.278446][T10760] input: syz1 as /devices/virtual/input/input5012 17:55:10 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 891.320177][T10749] input: syz1 as /devices/virtual/input/input5013 [ 891.357847][T10767] input: syz1 as /devices/virtual/input/input5014 17:55:10 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x658, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x200, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:10 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 891.511616][T10770] input: syz1 as /devices/virtual/input/input5015 17:55:10 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:10 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 891.648155][T10767] input: syz1 as /devices/virtual/input/input5016 [ 891.670587][T10770] input: syz1 as /devices/virtual/input/input5017 [ 891.695311][T10774] input: syz1 as /devices/virtual/input/input5018 17:55:10 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 891.847831][T10893] input: syz1 as /devices/virtual/input/input5020 [ 891.883518][T10800] input: syz1 as /devices/virtual/input/input5021 [ 891.893899][T10784] input: syz1 as /devices/virtual/input/input5022 [ 892.052674][T10904] input: syz1 as /devices/virtual/input/input5024 17:55:11 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x658, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x200, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:11 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x0, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:11 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:11 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:11 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0x0, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 892.416463][T10909] input: syz1 as /devices/virtual/input/input5025 [ 892.437645][T10911] input: syz1 as /devices/virtual/input/input5026 17:55:11 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 892.505256][T10920] input: syz1 as /devices/virtual/input/input5028 [ 892.528027][T10914] input: syz1 as /devices/virtual/input/input5029 [ 892.534513][T10919] input: syz1 as /devices/virtual/input/input5030 [ 892.698296][T10922] input: syz1 as /devices/virtual/input/input5031 [ 892.713616][T10914] input: syz1 as /devices/virtual/input/input5032 17:55:11 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 892.883118][T10922] input: syz1 as /devices/virtual/input/input5033 [ 892.895382][T10928] input: syz1 as /devices/virtual/input/input5034 [ 892.904445][T10939] input: syz1 as /devices/virtual/input/input5035 [ 893.005159][T10943] input: syz1 as /devices/virtual/input/input5036 [ 893.057175][T10999] input: syz1 as /devices/virtual/input/input5037 [ 893.212168][T11019] input: syz1 as /devices/virtual/input/input5039 17:55:12 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:12 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:12 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000272000)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 17:55:12 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:12 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:12 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:12 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 893.866487][T11076] input: syz1 as /devices/virtual/input/input5040 17:55:12 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 893.911349][T11081] input: syz1 as /devices/virtual/input/input5041 [ 893.935287][T11079] input: syz1 as /devices/virtual/input/input5042 17:55:12 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 893.970407][T11125] input: syz1 as /devices/virtual/input/input5043 [ 894.031947][T11182] input: syz1 as /devices/virtual/input/input5046 [ 894.062891][T11192] input: syz1 as /devices/virtual/input/input5047 17:55:12 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 894.259183][T11206] input: syz1 as /devices/virtual/input/input5048 17:55:13 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:13 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:13 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:13 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:13 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 894.677080][T11319] input: syz1 as /devices/virtual/input/input5049 17:55:13 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 894.805326][T11322] input: syz1 as /devices/virtual/input/input5051 [ 894.943031][T11343] input: syz1 as /devices/virtual/input/input5052 17:55:13 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 895.076581][T11399] input: syz1 as /devices/virtual/input/input5053 17:55:14 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x0, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 895.201621][T11440] input: syz1 as /devices/virtual/input/input5054 17:55:14 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 895.290200][T11451] input: syz1 as /devices/virtual/input/input5055 [ 895.416845][T11452] input: syz1 as /devices/virtual/input/input5058 [ 895.424340][T11456] input: syz1 as /devices/virtual/input/input5057 17:55:14 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 895.546652][T11456] input: syz1 as /devices/virtual/input/input5059 17:55:14 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:14 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:14 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 895.770154][T11473] input: syz1 as /devices/virtual/input/input5060 17:55:14 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 895.975424][T11515] input: syz1 as /devices/virtual/input/input5061 [ 896.012302][T11569] input: syz1 as /devices/virtual/input/input5062 [ 896.072497][T11591] input: syz1 as /devices/virtual/input/input5064 [ 896.094160][T11593] input: syz1 as /devices/virtual/input/input5065 [ 896.218754][T11598] input: syz1 as /devices/virtual/input/input5066 17:55:15 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:15 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x0, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:15 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 896.467673][T11605] input: syz1 as /devices/virtual/input/input5067 17:55:15 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:15 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 896.594660][T11611] input: syz1 as /devices/virtual/input/input5068 [ 896.716745][T11618] input: syz1 as /devices/virtual/input/input5069 [ 896.765495][T11619] input: syz1 as /devices/virtual/input/input5070 17:55:15 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 896.836826][T11618] input: syz1 as /devices/virtual/input/input5071 17:55:15 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 896.932468][T11622] input: syz1 as /devices/virtual/input/input5074 [ 896.957112][T11605] input: syz1 as /devices/virtual/input/input5073 [ 897.060874][T11631] input: syz1 as /devices/virtual/input/input5075 17:55:15 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:16 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:16 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 897.323062][T11641] input: syz1 as /devices/virtual/input/input5076 [ 897.411358][T11653] input: syz1 as /devices/virtual/input/input5078 17:55:16 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:16 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x0, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:16 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:16 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 897.767424][T11739] input: syz1 as /devices/virtual/input/input5079 [ 897.826218][T11768] input: syz1 as /devices/virtual/input/input5081 [ 897.836897][T11769] input: syz1 as /devices/virtual/input/input5080 17:55:16 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 897.985772][T11768] input: syz1 as /devices/virtual/input/input5083 [ 898.058848][T11779] input: syz1 as /devices/virtual/input/input5084 17:55:16 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:17 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:17 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 898.254841][T11785] input: syz1 as /devices/virtual/input/input5085 17:55:17 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 898.361839][T11894] input: syz1 as /devices/virtual/input/input5086 [ 898.428034][T11785] input: syz1 as /devices/virtual/input/input5087 [ 898.587584][T11894] input: syz1 as /devices/virtual/input/input5089 17:55:17 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x0, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 898.685994][T11785] input: syz1 as /devices/virtual/input/input5090 [ 898.812784][T11923] input: syz1 as /devices/virtual/input/input5091 17:55:17 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x0, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:17 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 898.906334][T11998] input: syz1 as /devices/virtual/input/input5092 17:55:17 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 899.084255][T12021] input: syz1 as /devices/virtual/input/input5093 [ 899.121300][T12028] input: syz1 as /devices/virtual/input/input5094 [ 899.164091][T12023] input: syz1 as /devices/virtual/input/input5095 [ 899.189631][T12030] input: syz1 as /devices/virtual/input/input5096 17:55:18 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 899.217889][T12027] input: syz1 as /devices/virtual/input/input5097 [ 899.271409][T12036] input: syz1 as /devices/virtual/input/input5098 17:55:18 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 899.345063][T12043] input: syz1 as /devices/virtual/input/input5100 [ 899.443439][T12030] input: syz1 as /devices/virtual/input/input5101 [ 899.613513][T12027] input: syz1 as /devices/virtual/input/input5102 17:55:18 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x0, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:18 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x5d8, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x180, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 899.890824][T12159] input: syz1 as /devices/virtual/input/input5103 [ 899.941920][T12161] input: syz1 as /devices/virtual/input/input5104 [ 900.056535][T12164] input: syz1 as /devices/virtual/input/input5107 [ 900.085364][T12161] input: syz1 as /devices/virtual/input/input5106 17:55:18 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r8, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r11, r10) dup3(r9, r11, 0x0) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r12, 0x4b69, &(0x7f0000000100)=""/127) 17:55:18 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r8, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r11, r10) dup3(r9, r11, 0x0) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r12, 0x4b69, &(0x7f0000000100)=""/127) 17:55:19 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 900.253567][T12161] input: syz1 as /devices/virtual/input/input5108 17:55:19 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 900.323048][T12172] input: syz1 as /devices/virtual/input/input5109 [ 900.341748][T12174] input: syz1 as /devices/virtual/input/input5110 17:55:19 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x5d8, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x180, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 900.449031][T12181] input: syz1 as /devices/virtual/input/input5113 [ 900.499216][T12182] input: syz1 as /devices/virtual/input/input5114 [ 900.595140][T12195] input: syz1 as /devices/virtual/input/input5115 17:55:19 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x0, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:19 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:55:19 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:55:19 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 900.876074][T12195] input: syz1 as /devices/virtual/input/input5117 [ 900.896256][T12201] input: syz1 as /devices/virtual/input/input5118 [ 900.934897][T12209] input: syz1 as /devices/virtual/input/input5119 17:55:19 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 901.115784][T12201] input: syz1 as /devices/virtual/input/input5120 17:55:20 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x5d8, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x180, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x0, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 901.345713][T12229] input: syz1 as /devices/virtual/input/input5121 [ 901.498652][T12235] input: syz1 as /devices/virtual/input/input5123 [ 901.525104][T12229] input: syz1 as /devices/virtual/input/input5124 17:55:20 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 901.591498][T12235] input: syz1 as /devices/virtual/input/input5125 17:55:20 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:20 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:20 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 901.757450][T12246] input: syz1 as /devices/virtual/input/input5126 [ 901.853008][T12245] input: syz1 as /devices/virtual/input/input5127 17:55:20 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 901.932440][T12260] input: syz1 as /devices/virtual/input/input5129 17:55:20 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x0, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 902.217955][T12271] input: syz1 as /devices/virtual/input/input5130 [ 902.250380][T12275] input: syz1 as /devices/virtual/input/input5131 [ 902.327616][T12275] input: syz1 as /devices/virtual/input/input5133 17:55:21 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 902.377104][T12271] input: syz1 as /devices/virtual/input/input5134 [ 902.514341][T12275] input: syz1 as /devices/virtual/input/input5135 17:55:21 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 902.609773][T12288] input: syz1 as /devices/virtual/input/input5136 17:55:21 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:21 executing program 4: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 902.739745][T12288] input: syz1 as /devices/virtual/input/input5138 17:55:21 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:21 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x640, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x68, 0x6, @m_skbmod={0x64, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x28, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 902.869204][T12305] input: syz1 as /devices/virtual/input/input5139 [ 902.908997][T12308] input: syz1 as /devices/virtual/input/input5140 17:55:21 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:21 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 903.097573][T12312] input: syz1 as /devices/virtual/input/input5141 [ 903.124806][T12310] input: syz1 as /devices/virtual/input/input5142 [ 903.268734][T12317] input: syz1 as /devices/virtual/input/input5144 17:55:22 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:22 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 903.500808][T12331] input: syz1 as /devices/virtual/input/input5145 17:55:22 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x640, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x68, 0x6, @m_skbmod={0x64, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x28, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:22 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:22 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 903.714403][T12339] input: syz1 as /devices/virtual/input/input5147 [ 903.745077][T12344] input: syz1 as /devices/virtual/input/input5148 [ 903.775490][T12350] input: syz1 as /devices/virtual/input/input5152 [ 903.785194][T12331] input: syz1 as /devices/virtual/input/input5149 [ 903.793366][T12346] input: syz1 as /devices/virtual/input/input5151 [ 903.818299][T12348] input: syz1 as /devices/virtual/input/input5153 17:55:22 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 903.877224][T12354] input: syz1 as /devices/virtual/input/input5155 [ 903.909343][T12359] input: syz1 as /devices/virtual/input/input5156 17:55:23 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x640, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e8, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x68, 0x6, @m_skbmod={0x64, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x28, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 904.248866][T12370] input: syz1 as /devices/virtual/input/input5157 17:55:23 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:23 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 904.381817][T12374] input: syz1 as /devices/virtual/input/input5159 17:55:23 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 904.431592][T12370] input: syz1 as /devices/virtual/input/input5160 17:55:23 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 904.495479][T12379] input: syz1 as /devices/virtual/input/input5161 [ 904.573309][T12379] input: syz1 as /devices/virtual/input/input5163 [ 904.609389][T12374] input: syz1 as /devices/virtual/input/input5164 17:55:23 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x10, 0x2, [@TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 904.703269][T12391] input: syz1 as /devices/virtual/input/input5165 [ 904.767399][T12397] input: syz1 as /devices/virtual/input/input5166 17:55:23 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 904.851504][T12398] input: syz1 as /devices/virtual/input/input5167 [ 904.864702][T12399] input: syz1 as /devices/virtual/input/input5168 [ 904.901419][T12404] input: syz1 as /devices/virtual/input/input5170 17:55:23 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x0, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 905.166055][T12391] input: syz1 as /devices/virtual/input/input5171 [ 905.209941][T12415] input: syz1 as /devices/virtual/input/input5172 17:55:24 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0x0, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:24 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x10, 0x2, [@TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:24 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 905.353802][T12415] input: syz1 as /devices/virtual/input/input5173 17:55:24 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 905.480111][T12423] input: syz1 as /devices/virtual/input/input5174 [ 905.549452][T12429] input: syz1 as /devices/virtual/input/input5175 [ 905.589296][T12433] input: syz1 as /devices/virtual/input/input5176 [ 905.634327][T12440] input: syz1 as /devices/virtual/input/input5178 [ 905.652976][T12442] input: syz1 as /devices/virtual/input/input5179 [ 905.765818][T12438] input: syz1 as /devices/virtual/input/input5180 [ 905.794658][T12433] input: syz1 as /devices/virtual/input/input5182 17:55:24 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 905.825961][T12472] input: syz1 as /devices/virtual/input/input5183 17:55:24 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x10, 0x2, [@TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 906.159757][T12559] input: syz1 as /devices/virtual/input/input5184 17:55:25 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0x0, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:25 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x0, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:25 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x0, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:25 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 906.316615][T12559] input: syz1 as /devices/virtual/input/input5186 [ 906.381245][T12569] input: syz1 as /devices/virtual/input/input5187 [ 906.396832][T12568] input: syz1 as /devices/virtual/input/input5188 [ 906.481537][T12572] input: syz1 as /devices/virtual/input/input5189 [ 906.516460][T12569] input: syz1 as /devices/virtual/input/input5190 [ 906.564824][T12587] input: syz1 as /devices/virtual/input/input5191 17:55:25 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 906.669088][T12572] input: syz1 as /devices/virtual/input/input5192 [ 906.719987][T12591] input: syz1 as /devices/virtual/input/input5193 [ 906.782375][T12596] input: syz1 as /devices/virtual/input/input5194 17:55:25 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 906.897674][T12598] input: syz1 as /devices/virtual/input/input5195 [ 906.925884][T12588] input: syz1 as /devices/virtual/input/input5196 [ 907.089976][T12707] input: syz1 as /devices/virtual/input/input5198 17:55:26 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:55:26 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:26 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0x0, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:26 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x0, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:26 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 907.430884][T12721] input: syz1 as /devices/virtual/input/input5199 [ 907.480712][T12729] input: syz1 as /devices/virtual/input/input5200 [ 907.551188][T12728] input: syz1 as /devices/virtual/input/input5201 [ 907.594718][T12732] input: syz1 as /devices/virtual/input/input5202 [ 907.700547][T12738] input: syz1 as /devices/virtual/input/input5204 [ 907.731791][T12728] input: syz1 as /devices/virtual/input/input5203 17:55:26 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 907.826158][T12732] input: syz1 as /devices/virtual/input/input5206 17:55:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 907.898648][T12744] input: syz1 as /devices/virtual/input/input5207 17:55:26 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 908.015377][T12788] SELinux: ebitmap: truncated map [ 908.031214][T12788] SELinux: failed to load policy 17:55:26 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:27 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 908.173745][T12865] SELinux: ebitmap: truncated map [ 908.179213][T12865] SELinux: failed to load policy 17:55:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:27 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x0, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:27 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 908.328001][T12872] input: syz1 as /devices/virtual/input/input5208 17:55:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:27 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 908.511227][T12872] input: syz1 as /devices/virtual/input/input5210 [ 908.574482][T12890] input: syz1 as /devices/virtual/input/input5211 [ 908.602501][T12887] input: syz1 as /devices/virtual/input/input5212 [ 908.695737][T12890] input: syz1 as /devices/virtual/input/input5213 [ 908.702260][T12901] SELinux: ebitmap: truncated map [ 908.702775][T12901] SELinux: failed to load policy 17:55:27 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140), &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:27 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 908.878022][T12887] input: syz1 as /devices/virtual/input/input5215 [ 908.914289][T12909] SELinux: ebitmap: truncated map 17:55:27 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:27 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x0, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:27 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 908.948363][T12909] SELinux: failed to load policy [ 908.956835][T12908] input: syz1 as /devices/virtual/input/input5216 [ 909.085344][T12915] input: syz1 as /devices/virtual/input/input5217 [ 909.106371][T12921] SELinux: ebitmap: truncated map 17:55:27 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 909.140073][T12921] SELinux: failed to load policy 17:55:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 909.289538][T12931] input: syz1 as /devices/virtual/input/input5219 17:55:28 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x0, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 909.394102][T12932] input: syz1 as /devices/virtual/input/input5220 [ 909.428511][T12935] SELinux: ebitmap: truncated map [ 909.500147][T12935] SELinux: failed to load policy 17:55:28 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x0, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 909.587844][T12941] input: syz1 as /devices/virtual/input/input5221 17:55:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 909.648454][T12943] input: syz1 as /devices/virtual/input/input5222 17:55:28 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140), &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 909.722915][T12945] input: syz1 as /devices/virtual/input/input5223 [ 909.886934][T12952] SELinux: ebitmap: truncated map [ 909.906239][T12949] input: syz1 as /devices/virtual/input/input5225 [ 909.914044][T12952] SELinux: failed to load policy 17:55:28 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 909.948763][T12956] input: syz1 as /devices/virtual/input/input5226 17:55:28 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 910.130522][T12966] SELinux: ebitmap: truncated map [ 910.162296][T12966] SELinux: failed to load policy 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 910.224698][T12972] input: syz1 as /devices/virtual/input/input5227 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:29 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0x0, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:29 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:29 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x0, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 910.518496][T13086] input: syz1 as /devices/virtual/input/input5228 [ 910.611548][T13094] input: syz1 as /devices/virtual/input/input5230 17:55:29 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140), &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 910.681473][T13100] input: syz1 as /devices/virtual/input/input5231 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) [ 910.766963][T13110] input: syz1 as /devices/virtual/input/input5232 [ 911.003125][T13110] input: syz1 as /devices/virtual/input/input5233 17:55:29 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000080)) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:55:29 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x0, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:29 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:29 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d97927940000fffffff820004000000000ed08691ff9dc0100df55010002000000"], 0x35) 17:55:30 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 911.196610][T13126] input: syz1 as /devices/virtual/input/input5234 [ 911.369876][T13141] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 911.383566][T13126] input: syz1 as /devices/virtual/input/input5236 [ 911.397154][T13143] input: syz1 as /devices/virtual/input/input5237 [ 911.415076][T13141] CPU: 0 PID: 13141 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 911.422738][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.422743][T13141] Call Trace: [ 911.422768][T13141] dump_stack+0x172/0x1f0 [ 911.422787][T13141] warn_alloc.cold+0x87/0x17f [ 911.422802][T13141] ? zone_watermark_ok_safe+0x260/0x260 [ 911.422817][T13141] ? avc_has_perm+0xcc/0x600 [ 911.422839][T13141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 911.422856][T13141] ? avc_has_perm+0x401/0x600 [ 911.466211][T13141] __vmalloc_node_range+0x483/0x7d0 [ 911.471504][T13141] ? mark_held_locks+0xf0/0xf0 [ 911.476279][T13141] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 911.482626][T13141] ? __inode_security_revalidate+0xf7/0x150 [ 911.482642][T13141] ? sel_write_load+0x1de/0x470 [ 911.482653][T13141] vmalloc+0x6b/0x90 [ 911.482667][T13141] ? sel_write_load+0x1de/0x470 [ 911.482680][T13141] sel_write_load+0x1de/0x470 [ 911.482700][T13141] __vfs_write+0x8a/0x110 [ 911.511140][T13141] ? sel_make_policy_nodes+0x1540/0x1540 [ 911.516802][T13141] vfs_write+0x268/0x5d0 [ 911.521055][T13141] ksys_write+0x14f/0x290 [ 911.525395][T13141] ? __ia32_sys_read+0xb0/0xb0 [ 911.530171][T13141] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 911.536256][T13141] __x64_sys_write+0x73/0xb0 [ 911.540854][T13141] do_syscall_64+0xfa/0x760 [ 911.545366][T13141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.551251][T13141] RIP: 0033:0x4598e9 [ 911.555146][T13141] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.574756][T13141] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.583178][T13141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 911.591161][T13141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 911.599231][T13141] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 911.607200][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 17:55:30 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 911.615174][T13141] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff 17:55:30 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:30 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x0, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:30 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x0, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 911.803928][T13141] Mem-Info: [ 911.807298][T13141] active_anon:168205 inactive_anon:292 isolated_anon:0 [ 911.807298][T13141] active_file:8484 inactive_file:65503 isolated_file:0 [ 911.807298][T13141] unevictable:0 dirty:603 writeback:0 unstable:0 [ 911.807298][T13141] slab_reclaimable:15923 slab_unreclaimable:157224 [ 911.807298][T13141] mapped:59186 shmem:357 pagetables:2260 bounce:0 [ 911.807298][T13141] free:1113452 free_pcp:310 free_cma:0 [ 911.852518][T13141] Node 0 active_anon:672720kB inactive_anon:1168kB active_file:33796kB inactive_file:262012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236644kB dirty:2408kB writeback:0kB shmem:1428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 192512kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 911.907457][T13141] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 911.934640][T13141] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.963815][T13255] input: syz1 as /devices/virtual/input/input5239 [ 911.972906][T13141] lowmem_reserve[]: 0 2547 2548 2548 17:55:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0xa) [ 911.981685][T13141] Node 0 DMA32 free:651044kB min:36184kB low:45228kB high:54272kB active_anon:678948kB inactive_anon:1168kB active_file:32760kB inactive_file:261936kB unevictable:0kB writepending:2404kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9344kB pagetables:8892kB bounce:0kB free_pcp:1400kB local_pcp:652kB free_cma:0kB 17:55:30 executing program 4: socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) [ 912.034777][T13267] input: syz1 as /devices/virtual/input/input5240 [ 912.059714][T13259] input: syz1 as /devices/virtual/input/input5238 [ 912.071031][T13141] lowmem_reserve[]: 0 0 1 1 [ 912.087401][T13141] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:55:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) [ 912.164200][T13270] input: syz1 as /devices/virtual/input/input5242 [ 912.175833][T13141] lowmem_reserve[]: 0 0 0 0 [ 912.183060][T13141] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.301298][T13255] input: syz1 as /devices/virtual/input/input5243 [ 912.309267][T13141] lowmem_reserve[]: 0 0 0 0 [ 912.315266][T13141] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 17:55:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x8000, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/62) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller1\x00'}) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x10) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') [ 912.354542][T13141] Node 0 DMA32: 241*4kB (UE) 108*8kB (U) 64*16kB (UE) 2*32kB (U) 2*64kB (ME) 2*128kB (UM) 3*256kB (UME) 1*512kB (U) 1*1024kB (M) 2*2048kB (UM) 153*4096kB (M) = 636388kB [ 912.378609][T13141] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 912.401431][T13141] Node 1 Normal: 61*4kB (UE) 236*8kB [ 912.401458][T13141] (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 912.431018][T13141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.452688][T13141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.463390][T13141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.473446][T13141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.483279][T13141] 74343 total pagecache pages [ 912.488709][T13141] 0 pages in swap cache [ 912.494296][T13141] Swap cache stats: add 0, delete 0, find 0/0 [ 912.501258][T13141] Free swap = 0kB 17:55:31 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x0, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:31 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) [ 912.508124][T13141] Total swap = 0kB [ 912.512086][T13141] 1965979 pages RAM [ 912.522096][T13141] 0 pages HighMem/MovableOnly [ 912.528142][T13141] 341201 pages reserved [ 912.542163][T13141] 0 pages cma reserved 17:55:31 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:31 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 912.603198][T13293] input: syz1 as /devices/virtual/input/input5244 [ 912.657626][T13296] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 912.729910][T13296] CPU: 1 PID: 13296 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 912.737521][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.747599][T13296] Call Trace: [ 912.750904][T13296] dump_stack+0x172/0x1f0 [ 912.755402][T13296] warn_alloc.cold+0x87/0x17f [ 912.760099][T13296] ? zone_watermark_ok_safe+0x260/0x260 [ 912.765660][T13296] ? avc_has_perm+0xcc/0x600 [ 912.770278][T13296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 912.776792][T13296] ? avc_has_perm+0x401/0x600 [ 912.781507][T13296] __vmalloc_node_range+0x483/0x7d0 [ 912.786810][T13296] ? mark_held_locks+0xf0/0xf0 [ 912.786831][T13296] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 912.797852][T13296] ? __inode_security_revalidate+0xf7/0x150 [ 912.797868][T13296] ? sel_write_load+0x1de/0x470 [ 912.797879][T13296] vmalloc+0x6b/0x90 [ 912.797896][T13296] ? sel_write_load+0x1de/0x470 [ 912.812487][T13296] sel_write_load+0x1de/0x470 [ 912.812505][T13296] __vfs_write+0x8a/0x110 [ 912.812520][T13296] ? sel_make_policy_nodes+0x1540/0x1540 [ 912.812534][T13296] vfs_write+0x268/0x5d0 [ 912.812549][T13296] ksys_write+0x14f/0x290 [ 912.812566][T13296] ? __ia32_sys_read+0xb0/0xb0 [ 912.812580][T13296] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 912.812597][T13296] __x64_sys_write+0x73/0xb0 [ 912.822098][T13296] do_syscall_64+0xfa/0x760 [ 912.822115][T13296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.822124][T13296] RIP: 0033:0x4598e9 [ 912.822137][T13296] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.822144][T13296] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.822156][T13296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 912.822163][T13296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 912.822170][T13296] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:55:31 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x0, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 912.822186][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 912.834635][T13307] input: syz1 as /devices/virtual/input/input5246 [ 912.836350][T13296] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 912.876152][T13296] Mem-Info: [ 913.006935][T13315] input: syz1 as /devices/virtual/input/input5247 [ 913.022151][T13296] active_anon:171348 inactive_anon:290 isolated_anon:0 [ 913.022151][T13296] active_file:8485 inactive_file:65523 isolated_file:0 [ 913.022151][T13296] unevictable:3597 dirty:624 writeback:0 unstable:0 [ 913.022151][T13296] slab_reclaimable:15929 slab_unreclaimable:157031 [ 913.022151][T13296] mapped:59161 shmem:356 pagetables:2290 bounce:0 [ 913.022151][T13296] free:1106618 free_pcp:371 free_cma:0 [ 913.104344][T13318] input: syz1 as /devices/virtual/input/input5248 [ 913.123098][T13296] Node 0 active_anon:689544kB inactive_anon:1160kB active_file:33800kB inactive_file:262092kB unevictable:15688kB isolated(anon):0kB isolated(file):0kB mapped:236644kB dirty:2492kB writeback:0kB shmem:1424kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:55:32 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 913.213306][T13319] input: syz1 as /devices/virtual/input/input5249 [ 913.225822][T13296] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 913.285092][T13296] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.342471][T13341] input: syz1 as /devices/virtual/input/input5250 [ 913.348161][T13296] lowmem_reserve[]: 0 2547 2548 2548 [ 913.360019][T13296] Node 0 DMA32 free:611212kB min:36184kB low:45228kB high:54272kB active_anon:695612kB inactive_anon:1160kB active_file:32764kB inactive_file:262016kB unevictable:21988kB writepending:2488kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9504kB pagetables:9160kB bounce:0kB free_pcp:1456kB local_pcp:516kB free_cma:0kB 17:55:32 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff98, &(0x7f0000000640)={&(0x7f00000001c0)={0x14, 0x8000000010, 0x82d}, 0x14}}, 0x0) [ 913.408034][T13296] lowmem_reserve[]: 0 0 1 1 [ 913.413098][T13296] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.455859][T13296] lowmem_reserve[]: 0 0 0 0 [ 913.462710][T13296] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:55:32 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:32 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 913.522082][T13296] lowmem_reserve[]: 0 0 0 0 [ 913.526655][T13296] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 913.610889][T13341] input: syz1 as /devices/virtual/input/input5252 17:55:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) getcwd(&(0x7f0000001040)=""/231, 0xe7) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 913.645022][T13296] Node 0 DMA32: 904*4kB (UME) 1242*8kB (UME) 351*16kB (UM) 173*32kB (UE) 5*64kB (UE) 3*128kB (UME) 1*256kB (E) 0*512kB 2*1024kB (UM) 4*2048kB (UM) 150*4096kB (M) = 650304kB 17:55:32 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x0, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 913.723984][T13296] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 913.736662][T13445] input: syz1 as /devices/virtual/input/input5253 [ 913.773712][T13296] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB 17:55:32 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 913.844781][T13452] input: syz1 as /devices/virtual/input/input5254 [ 913.857604][T13296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.876675][T13296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.914598][T13296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.942514][T13296] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.951947][T13296] 74385 total pagecache pages [ 913.957675][T13452] input: syz1 as /devices/virtual/input/input5256 17:55:32 executing program 4: open(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff98, &(0x7f0000000640)={&(0x7f00000001c0)={0x14, 0x8000000010, 0x82d}, 0x14}}, 0x0) [ 913.972389][T13296] 0 pages in swap cache [ 913.981467][T13296] Swap cache stats: add 0, delete 0, find 0/0 [ 914.000904][T13296] Free swap = 0kB [ 914.004752][T13296] Total swap = 0kB [ 914.011737][T13296] 1965979 pages RAM [ 914.036863][T13296] 0 pages HighMem/MovableOnly [ 914.050840][T13460] input: syz1 as /devices/virtual/input/input5257 [ 914.068684][T13296] 341201 pages reserved [ 914.081512][T13296] 0 pages cma reserved 17:55:32 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 17:55:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00v\x98\x91bS\xb3\x81\x99\x00', 0x800000000802}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000004c0)=0xf76e) [ 914.129720][T13467] input: syz1 as /devices/virtual/input/input5259 [ 914.168310][T13452] input: syz1 as /devices/virtual/input/input5260 [ 914.231246][T13475] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 914.244810][T13475] CPU: 1 PID: 13475 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 914.252466][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.262526][T13475] Call Trace: [ 914.266102][T13475] dump_stack+0x172/0x1f0 [ 914.270527][T13475] warn_alloc.cold+0x87/0x17f [ 914.275264][T13475] ? zone_watermark_ok_safe+0x260/0x260 [ 914.280798][T13475] ? avc_has_perm+0xcc/0x600 [ 914.285395][T13475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 914.291647][T13475] ? avc_has_perm+0x401/0x600 [ 914.296312][T13475] __vmalloc_node_range+0x483/0x7d0 [ 914.301500][T13475] ? mark_held_locks+0xf0/0xf0 [ 914.306283][T13475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 914.312511][T13475] ? __inode_security_revalidate+0xf7/0x150 [ 914.318390][T13475] ? sel_write_load+0x1de/0x470 [ 914.323256][T13475] vmalloc+0x6b/0x90 [ 914.327151][T13475] ? sel_write_load+0x1de/0x470 [ 914.331994][T13475] sel_write_load+0x1de/0x470 [ 914.336667][T13475] __vfs_write+0x8a/0x110 [ 914.341006][T13475] ? sel_make_policy_nodes+0x1540/0x1540 [ 914.346653][T13475] vfs_write+0x268/0x5d0 [ 914.350913][T13475] ksys_write+0x14f/0x290 [ 914.355259][T13475] ? __ia32_sys_read+0xb0/0xb0 [ 914.360036][T13475] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 914.366126][T13475] __x64_sys_write+0x73/0xb0 [ 914.370713][T13475] do_syscall_64+0xfa/0x760 [ 914.375208][T13475] entry_SYSCALL_64_after_hwframe+0x49/0xbe 17:55:33 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 914.381100][T13475] RIP: 0033:0x4598e9 [ 914.385008][T13475] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.404616][T13475] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 914.413020][T13475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 914.413026][T13475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 914.413032][T13475] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 914.413039][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 914.413045][T13475] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 914.442447][T13475] Mem-Info: 17:55:33 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:33 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 914.494451][T13475] active_anon:169253 inactive_anon:293 isolated_anon:0 [ 914.494451][T13475] active_file:8485 inactive_file:65543 isolated_file:0 [ 914.494451][T13475] unevictable:0 dirty:644 writeback:0 unstable:0 [ 914.494451][T13475] slab_reclaimable:15943 slab_unreclaimable:156888 [ 914.494451][T13475] mapped:59186 shmem:358 pagetables:2251 bounce:0 [ 914.494451][T13475] free:1112388 free_pcp:525 free_cma:0 17:55:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 17:55:33 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 914.578639][T13475] Node 0 active_anon:674912kB inactive_anon:1172kB active_file:33800kB inactive_file:262272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236744kB dirty:2672kB writeback:0kB shmem:1432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 198656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 914.609085][T13475] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:55:33 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x64c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1f4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 914.682224][T13475] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:55:33 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:33 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 914.798509][T13495] input: syz1 as /devices/virtual/input/input5261 [ 914.808110][T13475] lowmem_reserve[]: 0 2547 2548 2548 17:55:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffffff, 0x0, 0x109000, 0x20) sendto$inet6(r0, 0x0, 0xffffffffffffffc1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1a) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) [ 914.860009][T13475] Node 0 DMA32 free:652888kB min:36184kB low:45228kB high:54272kB active_anon:676916kB inactive_anon:1168kB active_file:32764kB inactive_file:262220kB unevictable:0kB writepending:2696kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9248kB pagetables:9052kB bounce:0kB free_pcp:2024kB local_pcp:828kB free_cma:0kB [ 914.915931][T13502] input: syz1 as /devices/virtual/input/input5263 [ 914.974820][T13505] input: syz1 as /devices/virtual/input/input5264 [ 915.053388][T13475] lowmem_reserve[]: 0 0 1 1 [ 915.079114][T13475] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.111260][T13475] lowmem_reserve[]: 0 0 0 0 [ 915.118027][T13475] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 915.149742][T13475] lowmem_reserve[]: 0 0 0 0 [ 915.160418][T13475] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 915.177845][T13475] Node 0 DMA32: 920*4kB (UME) 839*8kB (UME) 501*16kB (U) 206*32kB (UE) 9*64kB (UME) 3*128kB (UE) 1*256kB (E) 0*512kB 2*1024kB (UM) 2*2048kB (UM) 148*4096kB (M) = 638568kB 17:55:34 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x4}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 915.240697][T13505] input: syz1 as /devices/virtual/input/input5265 [ 915.302294][T13475] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 915.386644][T13475] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 915.452068][T13475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.461834][T13475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.461844][T13475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.461852][T13475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.461858][T13475] 74413 total pagecache pages [ 915.461864][T13475] 0 pages in swap cache [ 915.461870][T13475] Swap cache stats: add 0, delete 0, find 0/0 [ 915.461875][T13475] Free swap = 0kB [ 915.461879][T13475] Total swap = 0kB [ 915.461885][T13475] 1965979 pages RAM [ 915.461890][T13475] 0 pages HighMem/MovableOnly [ 915.461902][T13475] 341201 pages reserved [ 915.487377][T13505] input: syz1 as /devices/virtual/input/input5267 [ 915.536693][T13517] input: syz1 as /devices/virtual/input/input5266 17:55:34 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) 17:55:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 17:55:34 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 915.613303][T13475] 0 pages cma reserved 17:55:34 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:34 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:34 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 915.718743][T13517] input: syz1 as /devices/virtual/input/input5269 [ 915.754943][T13530] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 915.789242][T13530] CPU: 1 PID: 13530 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 915.796826][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.796833][T13530] Call Trace: [ 915.796856][T13530] dump_stack+0x172/0x1f0 [ 915.796875][T13530] warn_alloc.cold+0x87/0x17f [ 915.819231][T13530] ? zone_watermark_ok_safe+0x260/0x260 [ 915.824788][T13530] ? avc_has_perm+0xcc/0x600 [ 915.829394][T13530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 915.835674][T13530] ? avc_has_perm+0x401/0x600 [ 915.840363][T13530] __vmalloc_node_range+0x483/0x7d0 [ 915.845569][T13530] ? mark_held_locks+0xf0/0xf0 [ 915.850340][T13530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 915.856767][T13530] ? __inode_security_revalidate+0xf7/0x150 [ 915.862684][T13530] ? sel_write_load+0x1de/0x470 [ 915.862698][T13530] vmalloc+0x6b/0x90 [ 915.862709][T13530] ? sel_write_load+0x1de/0x470 [ 915.862722][T13530] sel_write_load+0x1de/0x470 [ 915.862737][T13530] __vfs_write+0x8a/0x110 [ 915.862748][T13530] ? sel_make_policy_nodes+0x1540/0x1540 [ 915.862761][T13530] vfs_write+0x268/0x5d0 [ 915.862776][T13530] ksys_write+0x14f/0x290 [ 915.862787][T13530] ? __ia32_sys_read+0xb0/0xb0 [ 915.862807][T13530] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 915.899502][T13530] __x64_sys_write+0x73/0xb0 [ 915.899520][T13530] do_syscall_64+0xfa/0x760 [ 915.899544][T13530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.925302][T13530] RIP: 0033:0x4598e9 [ 915.929201][T13530] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.948808][T13530] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.948821][T13530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 915.948827][T13530] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 915.948832][T13530] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 915.948839][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 915.948846][T13530] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 915.990344][T13530] Mem-Info: [ 916.010262][T13530] active_anon:171381 inactive_anon:293 isolated_anon:0 [ 916.010262][T13530] active_file:8485 inactive_file:65591 isolated_file:0 [ 916.010262][T13530] unevictable:0 dirty:693 writeback:0 unstable:0 [ 916.010262][T13530] slab_reclaimable:15934 slab_unreclaimable:156886 [ 916.010262][T13530] mapped:59182 shmem:358 pagetables:2328 bounce:0 [ 916.010262][T13530] free:1110322 free_pcp:407 free_cma:0 17:55:34 executing program 4: socket$inet6(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffffff, 0x0, 0x0, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:55:35 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x4}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 916.216213][T13541] input: syz1 as /devices/virtual/input/input5270 [ 916.254885][T13530] Node 0 active_anon:693624kB inactive_anon:1172kB active_file:33800kB inactive_file:262364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236728kB dirty:2468kB writeback:0kB shmem:1432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 916.297216][T13555] input: syz1 as /devices/virtual/input/input5271 [ 916.364729][T13530] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:55:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) [ 916.422536][T13559] input: syz1 as /devices/virtual/input/input5272 17:55:35 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 916.505064][T13561] input: syz1 as /devices/virtual/input/input5274 [ 916.554568][T13530] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.604893][T13555] input: syz1 as /devices/virtual/input/input5275 17:55:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) [ 916.667421][T13530] lowmem_reserve[]: 0 2547 2548 2548 [ 916.673207][T13530] Node 0 DMA32 free:640288kB min:36184kB low:45228kB high:54272kB active_anon:689484kB inactive_anon:1152kB active_file:32764kB inactive_file:262288kB unevictable:0kB writepending:2560kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9312kB pagetables:9256kB bounce:0kB free_pcp:1716kB local_pcp:1168kB free_cma:0kB 17:55:35 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 916.785896][T13530] lowmem_reserve[]: 0 0 1 1 [ 916.808643][T13530] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.845887][T13530] lowmem_reserve[]: 0 0 0 0 [ 916.854286][T13530] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.891045][T13530] lowmem_reserve[]: 0 0 0 0 [ 916.896264][T13530] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 916.910861][T13530] Node 0 DMA32: 854*4kB (UME) 341*8kB (UME) 642*16kB (UM) 247*32kB (UE) 14*64kB (UME) 3*128kB (UE) 2*256kB (ME) 1*512kB (M) 1*1024kB (U) 4*2048kB (UM) 148*4096kB (M) = 642048kB [ 916.929307][T13530] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 916.952170][T13530] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 916.984279][T13530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.996192][T13530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 917.015000][T13530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 917.025027][T13530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 917.058972][T13530] 74452 total pagecache pages [ 917.063885][T13530] 0 pages in swap cache [ 917.068228][T13530] Swap cache stats: add 0, delete 0, find 0/0 [ 917.077025][T13530] Free swap = 0kB [ 917.080930][T13530] Total swap = 0kB [ 917.089650][T13530] 1965979 pages RAM [ 917.098587][T13530] 0 pages HighMem/MovableOnly [ 917.107244][T13530] 341201 pages reserved [ 917.116884][T13530] 0 pages cma reserved 17:55:35 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) 17:55:35 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x628, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x50, 0x6, @m_skbmod={0x4c, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x4}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:35 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x0, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 917.232858][T13595] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 917.253595][T13595] CPU: 0 PID: 13595 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 917.261199][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.261204][T13595] Call Trace: [ 917.261229][T13595] dump_stack+0x172/0x1f0 [ 917.261249][T13595] warn_alloc.cold+0x87/0x17f [ 917.261263][T13595] ? zone_watermark_ok_safe+0x260/0x260 [ 917.261282][T13595] ? avc_has_perm+0xcc/0x600 [ 917.286587][T13591] input: syz1 as /devices/virtual/input/input5276 [ 917.289251][T13595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 917.289266][T13595] ? avc_has_perm+0x401/0x600 [ 917.289286][T13595] __vmalloc_node_range+0x483/0x7d0 [ 917.300269][T13595] ? mark_held_locks+0xf0/0xf0 [ 917.300286][T13595] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 917.300300][T13595] ? __inode_security_revalidate+0xf7/0x150 [ 917.300313][T13595] ? sel_write_load+0x1de/0x470 [ 917.300335][T13595] vmalloc+0x6b/0x90 [ 917.311229][T13595] ? sel_write_load+0x1de/0x470 [ 917.311243][T13595] sel_write_load+0x1de/0x470 [ 917.311260][T13595] __vfs_write+0x8a/0x110 [ 917.311277][T13595] ? sel_make_policy_nodes+0x1540/0x1540 [ 917.321219][T13595] vfs_write+0x268/0x5d0 [ 917.321240][T13595] ksys_write+0x14f/0x290 [ 917.333349][T13595] ? __ia32_sys_read+0xb0/0xb0 [ 917.333365][T13595] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 17:55:36 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 917.333381][T13595] __x64_sys_write+0x73/0xb0 [ 917.333400][T13595] do_syscall_64+0xfa/0x760 [ 917.338317][T13589] input: syz1 as /devices/virtual/input/input5277 [ 917.342115][T13595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.342126][T13595] RIP: 0033:0x4598e9 [ 917.342141][T13595] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.342147][T13595] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.351834][T13595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 917.351842][T13595] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 917.351848][T13595] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 917.351855][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 917.351863][T13595] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 917.389256][T13595] Mem-Info: [ 917.398952][T13595] active_anon:170344 inactive_anon:295 isolated_anon:0 [ 917.398952][T13595] active_file:8485 inactive_file:65609 isolated_file:0 [ 917.398952][T13595] unevictable:0 dirty:642 writeback:0 unstable:0 [ 917.398952][T13595] slab_reclaimable:15934 slab_unreclaimable:156483 [ 917.398952][T13595] mapped:59186 shmem:359 pagetables:2321 bounce:0 [ 917.398952][T13595] free:1111727 free_pcp:439 free_cma:0 [ 917.408216][T13595] Node 0 active_anon:681376kB inactive_anon:1180kB active_file:33800kB inactive_file:262436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236744kB dirty:2564kB writeback:0kB shmem:1436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 212992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 917.436512][T13595] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 917.490447][T13597] FAT-fs (loop4): bogus number of reserved sectors [ 917.552110][T13595] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.612524][T13597] FAT-fs (loop4): Can't find a valid FAT filesystem [ 917.655182][T13604] input: syz1 as /devices/virtual/input/input5279 [ 917.756856][T13616] input: syz1 as /devices/virtual/input/input5281 [ 917.786811][T13595] lowmem_reserve[]: 0 2547 2548 2548 17:55:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 917.804332][T13591] input: syz1 as /devices/virtual/input/input5280 [ 917.824997][T13595] Node 0 DMA32 free:646168kB min:36184kB low:45228kB high:54272kB active_anon:683272kB inactive_anon:1176kB active_file:32768kB inactive_file:262424kB unevictable:0kB writepending:2696kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9440kB pagetables:9152kB bounce:0kB free_pcp:1644kB local_pcp:688kB free_cma:0kB 17:55:36 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 918.013479][T13624] FAT-fs (loop4): bogus number of reserved sectors [ 918.053180][T13624] FAT-fs (loop4): Can't find a valid FAT filesystem 17:55:36 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x63c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x64, 0x6, @m_skbmod={0x60, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x18, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 918.064666][T13595] lowmem_reserve[]: 0 0 1 1 [ 918.070137][T13595] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.127952][T13595] lowmem_reserve[]: 0 0 0 0 [ 918.135140][T13595] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 918.166119][T13595] lowmem_reserve[]: 0 0 0 0 [ 918.171183][T13595] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 918.189009][T13595] Node 0 DMA32: 854*4kB (UME) 199*8kB (UME) 721*16kB (UM) 265*32kB (UE) 15*64kB (UME) 3*128kB (UE) 2*256kB (ME) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 148*4096kB (M) = 636672kB [ 918.211505][T13595] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 918.226176][T13595] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 918.246233][T13595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.267784][T13595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:55:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 918.293552][T13595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.310030][T13633] input: syz1 as /devices/virtual/input/input5282 [ 918.321424][T13595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.331459][T13595] 74469 total pagecache pages [ 918.338573][T13595] 0 pages in swap cache 17:55:37 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 918.343896][T13595] Swap cache stats: add 0, delete 0, find 0/0 [ 918.350228][T13595] Free swap = 0kB [ 918.363072][T13595] Total swap = 0kB [ 918.366919][T13595] 1965979 pages RAM [ 918.388816][T13595] 0 pages HighMem/MovableOnly 17:55:37 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x0, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 918.401014][T13595] 341201 pages reserved [ 918.414057][T13595] 0 pages cma reserved [ 918.458748][T13639] FAT-fs (loop4): bogus number of reserved sectors 17:55:37 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[], 0x0) [ 918.503740][T13633] input: syz1 as /devices/virtual/input/input5284 [ 918.509674][T13639] FAT-fs (loop4): Can't find a valid FAT filesystem [ 918.578668][T13648] input: syz1 as /devices/virtual/input/input5285 [ 918.616794][T13655] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 17:55:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 918.673872][T13648] input: syz1 as /devices/virtual/input/input5286 [ 918.690011][T13655] CPU: 0 PID: 13655 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 918.697591][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.707668][T13655] Call Trace: [ 918.710967][T13655] dump_stack+0x172/0x1f0 [ 918.715311][T13655] warn_alloc.cold+0x87/0x17f [ 918.719997][T13655] ? zone_watermark_ok_safe+0x260/0x260 [ 918.725559][T13655] ? avc_has_perm+0xcc/0x600 [ 918.730165][T13655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 918.736410][T13655] ? avc_has_perm+0x401/0x600 [ 918.741093][T13655] __vmalloc_node_range+0x483/0x7d0 [ 918.746314][T13655] ? mark_held_locks+0xf0/0xf0 [ 918.751088][T13655] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 918.757340][T13655] ? __inode_security_revalidate+0xf7/0x150 [ 918.763253][T13655] ? sel_write_load+0x1de/0x470 [ 918.768105][T13655] vmalloc+0x6b/0x90 [ 918.772007][T13655] ? sel_write_load+0x1de/0x470 [ 918.776859][T13655] sel_write_load+0x1de/0x470 [ 918.781540][T13655] __vfs_write+0x8a/0x110 [ 918.785877][T13655] ? sel_make_policy_nodes+0x1540/0x1540 [ 918.791516][T13655] vfs_write+0x268/0x5d0 [ 918.795766][T13655] ksys_write+0x14f/0x290 [ 918.800101][T13655] ? __ia32_sys_read+0xb0/0xb0 [ 918.804875][T13655] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 918.811035][T13655] __x64_sys_write+0x73/0xb0 [ 918.815633][T13655] do_syscall_64+0xfa/0x760 [ 918.820145][T13655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.826036][T13655] RIP: 0033:0x4598e9 [ 918.830019][T13655] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.849620][T13655] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.858060][T13655] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 918.866041][T13655] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 918.874014][T13655] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 918.881987][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 918.890050][T13655] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 918.909857][T13662] FAT-fs (loop4): bogus number of reserved sectors 17:55:37 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 918.926693][T13662] FAT-fs (loop4): Can't find a valid FAT filesystem 17:55:37 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x63c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x64, 0x6, @m_skbmod={0x60, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x18, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 919.003099][T13648] input: syz1 as /devices/virtual/input/input5287 [ 919.034391][T13655] Mem-Info: [ 919.042212][T13655] active_anon:173370 inactive_anon:293 isolated_anon:0 [ 919.042212][T13655] active_file:8486 inactive_file:65643 isolated_file:0 [ 919.042212][T13655] unevictable:0 dirty:695 writeback:0 unstable:0 [ 919.042212][T13655] slab_reclaimable:15952 slab_unreclaimable:156806 [ 919.042212][T13655] mapped:59186 shmem:357 pagetables:2314 bounce:0 [ 919.042212][T13655] free:1108290 free_pcp:441 free_cma:0 [ 919.094852][T13668] input: syz1 as /devices/virtual/input/input5288 17:55:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 919.128491][T13672] input: syz1 as /devices/virtual/input/input5290 [ 919.166709][T13655] Node 0 active_anon:695804kB inactive_anon:1172kB active_file:33804kB inactive_file:262572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236844kB dirty:2776kB writeback:0kB shmem:1428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 200704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:55:38 executing program 1: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 919.228434][T13655] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 919.264765][T13655] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.268010][T13679] FAT-fs (loop4): bogus number of reserved sectors [ 919.345127][T13655] lowmem_reserve[]: 0 2547 2548 2548 [ 919.346315][T13679] FAT-fs (loop4): Can't find a valid FAT filesystem [ 919.351374][T13655] Node 0 DMA32 free:644584kB min:36184kB low:45228kB high:54272kB active_anon:683508kB inactive_anon:1172kB active_file:32768kB inactive_file:262496kB unevictable:0kB writepending:2772kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9344kB pagetables:9256kB bounce:0kB free_pcp:2344kB local_pcp:1056kB free_cma:0kB [ 919.388449][T13655] lowmem_reserve[]: 0 0 1 1 [ 919.393867][T13655] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.426794][T13655] lowmem_reserve[]: 0 0 0 0 [ 919.431345][T13655] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.475663][T13655] lowmem_reserve[]: 0 0 0 0 [ 919.480220][T13655] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 17:55:38 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x0, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:38 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x63c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1e4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x64, 0x6, @m_skbmod={0x60, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x18, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) 17:55:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 919.579273][T13655] Node 0 DMA32: 685*4kB (UME) 164*8kB (U) 642*16kB (UM) 291*32kB (UME) 18*64kB (U) 4*128kB (UM) 1*256kB (E) 1*512kB (M) 1*1024kB (U) 2*2048kB (UM) 150*4096kB (M) = 645588kB [ 919.602370][T13655] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 919.639861][T13690] input: syz1 as /devices/virtual/input/input5291 [ 919.650672][T13655] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 919.692604][T13696] input: syz1 as /devices/virtual/input/input5292 [ 919.709973][T13693] input: syz1 as /devices/virtual/input/input5293 [ 919.725221][T13655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.749864][T13655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.786341][T13697] FAT-fs (loop4): bogus number of reserved sectors [ 919.812644][T13655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 919.816926][T13697] FAT-fs (loop4): Can't find a valid FAT filesystem [ 919.830815][T13655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 919.863664][T13655] 74490 total pagecache pages [ 919.868609][T13655] 0 pages in swap cache [ 919.875358][T13702] input: syz1 as /devices/virtual/input/input5295 [ 919.892732][T13655] Swap cache stats: add 0, delete 0, find 0/0 [ 919.906776][T13655] Free swap = 0kB [ 919.917196][T13655] Total swap = 0kB 17:55:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 919.955675][T13699] input: syz1 as /devices/virtual/input/input5296 [ 919.979413][T13655] 1965979 pages RAM [ 920.019244][T13655] 0 pages HighMem/MovableOnly [ 920.087058][T13655] 341201 pages reserved [ 920.129107][T13655] 0 pages cma reserved 17:55:39 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:39 executing program 1: epoll_create1(0x0) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 920.224427][T13711] FAT-fs (loop4): bogus number of reserved sectors 17:55:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 920.278661][T13711] FAT-fs (loop4): Can't find a valid FAT filesystem 17:55:39 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 920.404064][T13724] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 920.417874][T13724] CPU: 1 PID: 13724 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 920.425517][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.425522][T13724] Call Trace: [ 920.425548][T13724] dump_stack+0x172/0x1f0 [ 920.425566][T13724] warn_alloc.cold+0x87/0x17f [ 920.425580][T13724] ? zone_watermark_ok_safe+0x260/0x260 [ 920.425597][T13724] ? avc_has_perm+0xcc/0x600 [ 920.425615][T13724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 920.425625][T13724] ? avc_has_perm+0x401/0x600 [ 920.425641][T13724] __vmalloc_node_range+0x483/0x7d0 [ 920.425652][T13724] ? mark_held_locks+0xf0/0xf0 [ 920.425666][T13724] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 920.425677][T13724] ? __inode_security_revalidate+0xf7/0x150 [ 920.425691][T13724] ? sel_write_load+0x1de/0x470 [ 920.425706][T13724] vmalloc+0x6b/0x90 [ 920.439087][T13724] ? sel_write_load+0x1de/0x470 [ 920.462255][T13729] FAT-fs (loop4): bogus number of reserved sectors [ 920.464570][T13724] sel_write_load+0x1de/0x470 [ 920.464586][T13724] __vfs_write+0x8a/0x110 [ 920.464605][T13724] ? sel_make_policy_nodes+0x1540/0x1540 [ 920.485383][T13729] FAT-fs (loop4): Can't find a valid FAT filesystem [ 920.485442][T13724] vfs_write+0x268/0x5d0 [ 920.537013][T13724] ksys_write+0x14f/0x290 [ 920.541351][T13724] ? __ia32_sys_read+0xb0/0xb0 [ 920.546144][T13724] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 920.552223][T13724] __x64_sys_write+0x73/0xb0 [ 920.556933][T13724] do_syscall_64+0xfa/0x760 [ 920.561447][T13724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.567372][T13724] RIP: 0033:0x4598e9 [ 920.571271][T13724] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 920.590880][T13724] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 920.599303][T13724] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 920.607365][T13724] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 920.615345][T13724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 920.623413][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 920.631389][T13724] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 920.647225][T13724] Mem-Info: [ 920.650530][T13724] active_anon:172386 inactive_anon:292 isolated_anon:0 [ 920.650530][T13724] active_file:8486 inactive_file:65671 isolated_file:0 [ 920.650530][T13724] unevictable:0 dirty:724 writeback:0 unstable:0 [ 920.650530][T13724] slab_reclaimable:15966 slab_unreclaimable:157183 [ 920.650530][T13724] mapped:59198 shmem:359 pagetables:2290 bounce:0 [ 920.650530][T13724] free:1108758 free_pcp:433 free_cma:0 17:55:39 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x6c, 0x6, @m_skbmod={0x68, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x20, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 920.689952][T13724] Node 0 active_anon:689616kB inactive_anon:1176kB active_file:33804kB inactive_file:262684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236864kB dirty:2892kB writeback:0kB shmem:1436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 920.720408][T13724] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 920.747172][T13724] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.778116][T13724] lowmem_reserve[]: 0 2547 2548 2548 17:55:39 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 920.791642][T13724] Node 0 DMA32 free:630732kB min:36184kB low:45228kB high:54272kB active_anon:695672kB inactive_anon:1172kB active_file:32772kB inactive_file:262640kB unevictable:0kB writepending:2920kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:9312kB pagetables:9168kB bounce:0kB free_pcp:1864kB local_pcp:1388kB free_cma:0kB [ 920.874679][T13736] input: syz1 as /devices/virtual/input/input5297 17:55:39 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x0, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) [ 920.916011][T13724] lowmem_reserve[]: 0 0 1 1 [ 920.938886][T13724] Node 0 Normal free:12kB min:12kB low:12kB high:12kB active_anon:24kB inactive_anon:0kB active_file:1036kB inactive_file:76kB unevictable:0kB writepending:4kB present:786432kB managed:1148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.981259][T13740] FAT-fs (loop4): bogus number of reserved sectors [ 921.008571][T13740] FAT-fs (loop4): Can't find a valid FAT filesystem [ 921.030569][T13724] lowmem_reserve[]: 0 0 0 0 [ 921.035352][T13724] Node 1 Normal free:3781716kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 921.077832][T13724] lowmem_reserve[]: 0 0 0 0 [ 921.097318][T13736] input: syz1 as /devices/virtual/input/input5300 17:55:39 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 17:55:39 executing program 1: epoll_create1(0x0) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 921.101936][T13724] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 17:55:39 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 921.163460][T13748] input: syz1 as /devices/virtual/input/input5299 [ 921.196555][T13750] input: syz1 as /devices/virtual/input/input5301 [ 921.203782][T13724] Node 0 DMA32: 631*4kB (U) 136*8kB (U) 623*16kB (UM) 299*32kB (UM) 21*64kB (UE) 6*128kB (UME) 0*256kB 1*512kB (M) 1*1024kB (U) 5*2048kB (UM) 150*4096kB (M) = 651436kB [ 921.267230][T13724] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 921.287997][T13761] FAT-fs (loop4): bogus number of reserved sectors 17:55:40 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x6c, 0x6, @m_skbmod={0x68, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x20, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 921.311513][T13724] Node 1 Normal: 61*4kB (UE) 236*8kB (UE) 266*16kB (UE) 63*32kB (UME) 20*64kB (UME) 7*128kB (U) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 0*2048kB 919*4096kB (M) = 3781716kB [ 921.356770][T13761] FAT-fs (loop4): Can't find a valid FAT filesystem [ 921.399091][T13759] input: syz1 as /devices/virtual/input/input5302 17:55:40 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 921.451597][T13724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.519589][T13772] input: syz1 as /devices/virtual/input/input5303 [ 921.530059][T13724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.585670][T13724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.626010][T13779] FAT-fs (loop4): bogus number of reserved sectors [ 921.651821][T13724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 921.685292][T13779] FAT-fs (loop4): Can't find a valid FAT filesystem [ 921.692299][T13724] 74523 total pagecache pages [ 921.706493][T13724] 0 pages in swap cache [ 921.730073][T13724] Swap cache stats: add 0, delete 0, find 0/0 [ 921.754192][T13772] input: syz1 as /devices/virtual/input/input5305 [ 921.790199][T13724] Free swap = 0kB 17:55:40 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@fmask={'fmask'}}]}) [ 921.812477][T13724] Total swap = 0kB [ 921.816402][T13724] 1965979 pages RAM [ 921.834286][T13724] 0 pages HighMem/MovableOnly [ 921.839167][T13724] 341201 pages reserved [ 921.846188][T13724] 0 pages cma reserved 17:55:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:55:40 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x66c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r11, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0x0, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x0, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x214, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x74, 0x6, @m_skbmod={0x70, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49, 0x7f}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x28, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1e2b5f8396277c551"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xffff, 0x1cb}, {0x7, 0x9, 0x800}, 0x0, 0x5, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r13, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r14, r13) dup3(r12, r14, 0x0) r15 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r15, 0x4b69, &(0x7f0000000100)=""/127) 17:55:40 executing program 5: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 921.987089][T13787] FAT-fs (loop4): bogus number of reserved sectors [ 922.012894][T13792] syz-executor.2: vmalloc: allocation failure: 0 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 922.034575][T13787] FAT-fs (loop4): Can't find a valid FAT filesystem [ 922.049864][T13792] CPU: 1 PID: 13792 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 922.057633][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.057639][T13792] Call Trace: [ 922.057662][T13792] dump_stack+0x172/0x1f0 [ 922.057680][T13792] warn_alloc.cold+0x87/0x17f [ 922.057698][T13792] ? zone_watermark_ok_safe+0x260/0x260 [ 922.075465][T13792] ? avc_has_perm+0xcc/0x600 [ 922.075493][T13792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 922.085696][T13792] ? avc_has_perm+0x401/0x600 [ 922.085714][T13792] __vmalloc_node_range+0x483/0x7d0 [ 922.085725][T13792] ? mark_held_locks+0xf0/0xf0 [ 922.085742][T13792] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 922.085754][T13792] ? __inode_security_revalidate+0xf7/0x150 [ 922.085768][T13792] ? sel_write_load+0x1de/0x470 [ 922.085778][T13792] vmalloc+0x6b/0x90 [ 922.085796][T13792] ? sel_write_load+0x1de/0x470 17:55:40 executing program 1: epoll_create1(0x0) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 922.096681][T13792] sel_write_load+0x1de/0x470 [ 922.096701][T13792] __vfs_write+0x8a/0x110 [ 922.101835][T13798] input: syz1 as /devices/virtual/input/input5306 [ 922.106650][T13792] ? sel_make_policy_nodes+0x1540/0x1540 [ 922.106665][T13792] vfs_write+0x268/0x5d0 [ 922.106682][T13792] ksys_write+0x14f/0x290 [ 922.106698][T13792] ? __ia32_sys_read+0xb0/0xb0 [ 922.106713][T13792] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 922.106727][T13792] __x64_sys_write+0x73/0xb0 [ 922.106743][T13792] do_syscall_64+0xfa/0x760 [ 922.106757][T13792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.106767][T13792] RIP: 0033:0x4598e9 [ 922.106782][T13792] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.106788][T13792] RSP: 002b:00007f7b59e62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 922.106806][T13792] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 17:55:41 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r3, r2) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7f, @remote, 0x6194882b}, 0x1c) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) dup3(r4, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x7b3a1923945a0dec, 0xfffffffffffffffc) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xe07, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2080800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x644, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r9, {0x5}, {0x0, 0xc}, {0x0, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc1, 0x8000, 0x7, 0x95, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x10000, 0x3ff, 0x0, 0x2, 0x80000001, 0x2, 0x1, 0xfffffffffffffff7, 0xff, 0x7f, 0x200, 0x6, 0x400, 0x4, 0x7, 0x0, 0x8d2, 0x200, 0xa4b3, 0x5, 0x0, 0x4, 0xfffffffffffffff9, 0x0, 0x20, 0x100000000, 0xc52d, 0x4, 0x8, 0x0, 0x5, 0x6, 0x7fff, 0x9, 0x20, 0x210, 0x200000000000000, 0x1, 0x5, 0xff, 0x1, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x6d, 0x1000, 0xfffffffffffffffc, 0x262a, 0x2b, 0x7, 0x76, 0x9, 0x4, 0x40, 0x3, 0x8, 0x1, 0xc75, 0x0, 0x5, 0x3, 0x200, 0x8, 0x39, 0x3, 0x81, 0x4, 0x3ff, 0x0, 0x9122, 0x1, 0x7, 0x81, 0x9, 0x2, 0xb2, 0x200, 0xeb0b, 0x1, 0x3, 0xce8, 0x3, 0x7fff, 0x6, 0x3f, 0x400, 0xac, 0x5, 0x0, 0x7, 0x5, 0x6, 0x3, 0x81, 0x8, 0x20, 0x5, 0x30, 0x7, 0x5cd, 0x0, 0x5, 0x800f, 0x9, 0x400, 0x3, 0x8, 0x80, 0x7, 0x49, 0x4518, 0x3, 0x7f, 0x81, 0x2, 0x2, 0xffff, 0x7, 0x5, 0x7fffffff, 0x10001, 0x88, 0x80000001, 0x20, 0x2, 0x4af3, 0xde62, 0x1000, 0x6, 0x8000, 0x1000, 0x40, 0x8, 0x6, 0x1000, 0x4, 0x10000, 0x40, 0x10001, 0x4, 0x200, 0x38f3, 0x1000, 0x8001, 0x5, 0x7, 0x80, 0x2, 0x4b89, 0x5, 0x5, 0x6, 0x6, 0x7fff, 0x8, 0x2, 0xece4, 0x80000001, 0x71a, 0x100000000, 0x1ff, 0x10001, 0xff, 0x6, 0x1ffc000, 0xff, 0xfad7, 0x8, 0x401, 0x8, 0x6, 0x1, 0xd6, 0x1, 0x3, 0xffffffff, 0x2, 0xc25, 0x2, 0x7b38, 0x2, 0x80000001, 0x0, 0x1, 0x7, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x0, 0x8, 0x6, 0x3, 0xd828, 0x3, 0x8, 0x5, 0x3, 0x5, 0x3, 0x6b, 0xffffffffffffffe0, 0x8000, 0x881, 0xfff, 0x640, 0x1, 0x2, 0x5, 0x5, 0x4, 0xffffffffffffff00, 0xff, 0x3eb, 0x100000001, 0x1, 0x2, 0xfffffffffffffffd, 0x7ce6, 0x1f, 0x0, 0x0, 0x8, 0x796c5e83, 0x0, 0x20, 0x4, 0x7, 0x0, 0x7, 0x1ff, 0x10000, 0x1f, 0x9, 0x80000001, 0x7, 0x2, 0xfff, 0x5, 0x7fff, 0xd6, 0x3, 0x4, 0x8, 0xfbd7]}}]}}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1ec, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr="9d3998af8db33896e62d59a63422a662"}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, [], 0x11}}, @TCA_RSVP_ACT={0x110, 0x6, @m_gact={0x10c, 0x20, {{0xc, 0x1, 'gact\x00'}, {0x28, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a78}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x1, 0x1, 0x800, 0x2a33}}]}, {0xd0, 0x6, "4c7e6a06d6ed27317a628424573ba1c5f014490ed4801fc101d1579e853028c358991d6a4c73083113311fec53b84fd6732f1372380ab0a3115eaf4ab602c8289c1684f4a6173e9045acb60b16afe60c3dc7ead80d95279e124976bbe2d13400667a6c7988d45ff0c0dfe55b1bb51dfb0d92cdb3a470aa8eb11715f1bed9262baa3b40cdbfbfa8d82808547d16128e4651af500c61149673c2850c74d56bc09ef9b89f79800fcc3167312c3dc3489d78cf30d7c3e8cef8e17844af4ff4c764cdad4f11bfd453c5ac6a"}}}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr="026b6bfd70faf0c23712efeebfbe5f1d"}, @TCA_RSVP_ACT={0x6c, 0x6, @m_skbmod={0x68, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7ff, 0xfa, 0x0, 0x49}}}, @TCA_SKBMOD_SMAC={0xc}]}, {0x20, 0x6, "b108d34affd7681c3d39fb2f9736fb71f889e36a773640b0d903b1"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff0, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x40}, 0x50) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r11, 0x5501) r12 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r12, r11) dup3(r10, r12, 0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r13, 0x4b69, &(0x7f0000000100)=""/127) [ 922.117782][T13792] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 922.117790][T13792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 922.117798][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b59e636d4 [ 922.117807][T13792] R13: 00000000004c9b57 R14: 00000000004e12c8 R15: 00000000ffffffff [ 922.144150][T13792] Mem-Info: [ 922.153609][T13792] active_anon:169781 inactive_anon:298 isolated_anon:0 [ 922.153609][T13792] active_file:8487 inactive_file:65696 isolated_file:0 [ 922.153609][T13792] unevictable:0 dirty:748 writeback:0 unstable:0 [ 922.153609][T13792] slab_reclaimable:15974 slab_unreclaimable:157209 [ 922.153609][T13792] mapped:59161 shmem:361 pagetables:2271 bounce:0 [ 922.153609][T13792] free:1111428 free_pcp:594 free_cma:0 [ 922.159165][T13801] kobject: 'input5307' (0000000046bd4064): kobject_uevent_env [ 922.163186][T13792] Node 0 active_anon:679124kB inactive_anon:1192kB active_file:33808kB inactive_file:262784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236644kB dirty:2988kB writeback:0kB shmem:1444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 212992kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 922.163210][T13792] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 922.163221][T13792] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 922.172543][T13787] kobject: 'loop4' (000000002a72fe6b): kobject_uevent_env [ 922.178459][T13792] lowmem_reserve[]: 0 2547 2548 2548 [ 922.186033][T13799] kobject: '(null)' (00000000ae095903): kobject_cleanup, parent 00000000809716c6 [ 922.193826][T13792] Node 0 DMA32 free:650348kB min:36184kB low:45228kB high:54272kB active_anon:676936kB inactive_anon:1192kB active_file:32772kB inactive_file:262708kB unevictable:0kB writepending:2984kB present:3129332kB managed:2611872kB mlocked:0kB kernel_stack:8928kB pagetables:8936kB bounce:0kB free_pcp:2156kB local_pcp:1220kB free_cma:0kB [ 922.197659][T13787] kobject: 'loop4' (000000002a72fe6b): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 922.221909][T13792] lowmem_reserve[]: 0 0 1 1 [ 922.236679][T13801] kobject: 'input5307' (0000000046bd4064): fill_kobj_path: path = '/devices/virtual/input/input5307' [ 922.242444][T13802] ------------[ cut here ]------------ [ 922.251490][T13799] kobject: '(null)' (00000000ae095903): calling ktype release [ 922.257655][T13802] refcount_t: increment on 0; use-after-free.