7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 226.654409] input: syz1 as /devices/virtual/input/input263 [ 226.685818] input: syz1 as /devices/virtual/input/input264 [ 226.696478] input: syz1 as /devices/virtual/input/input265 [ 226.725090] input: syz1 as /devices/virtual/input/input266 18:43:54 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 18:43:54 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xd0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x2c}, &(0x7f0000000200)=0x8) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:43:54 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x400, 0x4480) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r2, r2) [ 227.196914] input: syz1 as /devices/virtual/input/input269 [ 227.218938] hid-generic 0000:0000:0000.0019: ignoring exceeding usage max [ 227.238954] input: syz1 as /devices/virtual/input/input270 18:43:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:54 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x8000, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/202, 0xca) mkdir(&(0x7f0000000100)='./file0\x00', 0x18) chdir(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) r2 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000380)={'bridge0\x00', 0x7f}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 227.247391] input: syz1 as /devices/virtual/input/input271 [ 227.264296] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on sz1 [ 227.321079] input: syz1 as /devices/virtual/input/input272 [ 227.337632] input: syz1 as /devices/virtual/input/input273 18:43:54 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 227.402605] input: syz1 as /devices/virtual/input/input274 18:43:54 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa459c7e09593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 227.444870] input: syz1 as /devices/virtual/input/input275 18:43:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x1f, 0xf, 0xffffffff80000001, 0x100, "a08b54c08193233fa6ad76698f333fa401f3517f09d51d88f561c9ec806edade"}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) dup2(r0, r1) [ 227.567115] input: syz1 as /devices/virtual/input/input277 [ 227.581366] input: syz1 as /devices/virtual/input/input278 [ 227.673483] input: syz1 as /devices/virtual/input/input279 18:43:55 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 18:43:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:55 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="be45e46246bc4a89cc30e85654232f8861c6742db412ab8f5b348ab3", 0x1c}], 0x1, &(0x7f0000000680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x6, "516443af"}]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp={0x44, 0x30, 0x9, 0x3, 0x13, [{[@rand_addr=0x4], 0x400000000}, {[@local], 0xbee}, {[@local], 0x3}, {[], 0x1}, {[@broadcast]}, {[@empty], 0x4}]}, @ssrr={0x89, 0x23, 0x9, [@multicast1, @multicast1, @multicast1, @empty, @rand_addr=0x80000001, @rand_addr=0x81, @remote, @remote]}, @rr={0x7, 0xf, 0x4, [@rand_addr=0xff, @loopback, @rand_addr=0x28]}, @cipso={0x86, 0x2d, 0x2, [{0x1, 0xc, "5e96dcff1bc2e69ea7c1"}, {0x1, 0x4, "c14e"}, {0x7, 0x10, "bf8782fb24e74a9e6094d8a58ff3"}, {0x1, 0x7, "c285ef5cbe"}]}, @noop, @noop, @ssrr={0x89, 0x2b, 0x4, [@rand_addr=0x5, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0x4, [@remote]}, @ra={0x94, 0x6, 0x492c}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev, @rand_addr=0x9}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x180}}], 0x1, 0x80c0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r1, r1) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000480)={0xfffffffffffff598, 0xb5315258, 0x3, @stepwise={0x3, 0xffffffffffff8001, 0x8, 0x4, 0x7, 0x40}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x9}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000740)={0xfffffffffffffffa, 0xa77, 0x0, 0x1, 0x4, 0x5, 0x3, 0x8, 0x0}, &(0x7f0000000780)=0x20) sendmsg$inet_sctp(r2, &(0x7f00000008c0)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)="a639b81c34a8c6506c4a67da1d5c06ce9a7f6ff4c1ae4c72e0b69ee8824594d239f6d6c87fc16176c3a06264a92a8e1a9ada05342c8dc040017f3b4a9c9eeac20723c86482718597b85bf83ce4163ce149e41dd31faa664084046a7f99961377e3606444dca2602a63975838420685b18ad93a9628d5fdf6ae90d8ca6fc0770a3472b6e551fdab28758dcdea40600d5eb19c11aa7041bfcf04b5e40bf18e1e49b7f43432", 0xa4}, {&(0x7f0000000240)="618dca58652645757eae943f030256b330fc77915c11200a3860ada6b4d0211b9f267fb4d2172432217d50a8366763fddf490610666800ee7607254aff", 0x3d}, {&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="39de1a6d811e1fc093ae4291cd32ac704de738343b413405b225b81b870bf95eae42dcda54bae996dbd979bc54f132b555e98c1b2aedc4c2199f4a077b8735826c334f5a80a2e291d0b93114b054c12da0bb463754466738f1f6a5fe633db9c2e43825fefc8e5fd462dab0ce89666ae8d39d01a4805ba0d271e20dd2e492bc809d2df154c964376698c23f9ff4ee8c1f1cde305cf826da17b72bbc3e2849989788654b30865a096f468a8dba8dd436ba251dd2ca3b74a12b402d3a40c6da4d6936452bb51ddd8c88a4f847ac3f", 0xcd}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="e825c00f6d17737a6a1196d8720621641a918690b319684ff527eb5154bba127b04305dad9c1b165caa94a4d13f6db8e4005ef284b52aecc367c6619c99d3e93fe7873ac3e0a4ba377c38ae5ead2dab2909a6187aa8460b9f81f8a62ad8eaab96d3765dbf3cf3b86207025124e547b6841ee4211f7e497f0", 0x78}, {&(0x7f0000000540)="eb3261b53a5fc0e8a2d008d8df7b1306fcbd5d49e110626628cf75220281243c9c85d734811bbcccbf24a8291ec88776be2259dc0a196049425172211a49d1e70f5c79a8fa841ab70afdf4798a549c26e7f546ebe8c789c7fae794fec4f9777b81c0a7725758ef84c6ced616878747bdf5cbcaacf17178d341dcfe5af5985380270e10233572907ea7b448d4f8748a1252247ba9881b7da8a401347fd2444247a97a1dd44416f972b18066cdc1f79f20cf6da74b92feb3848200f13a14bda68ce9dae3b3bc88b651b3d8aee11a56b315120c3d1be4b977d2133c5810185eacd566a2b7", 0xe3}], 0x7, &(0x7f00000007c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x7fffffff}}, @init={0x18, 0x84, 0x0, {0x5, 0x3072443d, 0x1, 0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x401}}, @sndrcv={0x30, 0x84, 0x1, {0xa1, 0x180000, 0x5, 0x3, 0xfff, 0x42, 0x3, 0x81, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xfff, 0x200, 0x5, 0x3, 0x0, 0x7, 0xfffffffffffffffb, r4}}], 0xd8, 0x8041}, 0x20000000) 18:43:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 228.059424] input: syz1 as /devices/virtual/input/input280 [ 228.069536] input: syz1 as /devices/virtual/input/input281 [ 228.078327] input: syz1 as /devices/virtual/input/input282 [ 228.097835] hid-generic 0000:0000:0000.001A: ignoring exceeding usage max 18:43:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:55 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x150) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 228.117808] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on sz1 18:43:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.204836] input: syz1 as /devices/virtual/input/input284 18:43:55 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00\x95z\xf2p\xc2\x94\xff\x85N(\x7fl\x02\xe9\tN\xa8\x1c\x85\xa8_/2\xb3/\x94\xff\xcaC\x9aS|%aW\xfd\x1a(\xf1\xb16\xb8\xe1\xe6\x9cOi\xed_BOP]g\xe2\x8e\xb8\xeb\xd4Z\x9c\xea\xf5\x10\x9a\xee\xb0\x1a@C}K\x803\xfe\xd6\xab\x1dN\xe2\xb2k\x8b\x87\xc8\x15\x92\xfer\xc7\'4\x88]\x1b!\x86?E44/]\xed\xb5\xe6c\xb5\x9c\x1d\xe1r2\x93<\a\xd6\x0e1-\xfe\xc8\xd9\x14\x951\x1a-\t\'T\xb1\xfb\x8a\x85\x1cD(/\xbd\xb7\x16>&\xda\v\x1ez\xc8\xc9\xd61)A\x1d-\"\xdb\xf1\xd8\xd5\xd2\xf6#7\xf7\x15\xe4y\x12\x19gpN\x96g\n\x1fAt\xe8y-\xba\xd1\xc6\x02\xbdY\x0e\xf1\xffF\xba\xf0\xfar\xc0\xf3\x92\xcc\x83\xb6\xac\xfa\x88\x1eZ\xec\xe4\'\n\x80\xfb\xd51\xc1\x1d\a\xb2?\xd59v[\'\x80pEXr\x19\x80\xf5\x11\xbf\xc6j\xf0G\x1f\x00\x00\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f0000000480)='tmpfs\x00\x95z\xf2p\xc2\x94\xff\x85N(\x7fl\x02\xe9\tN\xa8\x1c\x85\xa8_/2\xb3/\x94\xff\xcaC\x9aS|%aW\xfd\x1a(\xf1\xb16\xb8\xe1\xe6\x9cOi\xed_BOP]g\xe2\x8e\xb8\xeb\xd4Z\x9c\xea\xf5\x10\x9a\xee\xb0\x1a@C}K\x803\xfe\xd6\xab\x1dN\xe2\xb2k\x8b\x87\xc8\x15\x92\xfer\xc7\'4\x88]\x1b!\x86?E44/]\xed\xb5\xe6c\xb5\x9c\x1d\xe1r2\x93<\a\xd6\x0e1-\xfe\xc8\xd9\x14\x951\x1a-\t\'T\xb1\xfb\x8a\x85\x1cD(/\xbd\xb7\x16>&\xda\v\x1ez\xc8\xc9\xd61)A\x1d-\"\xdb\xf1\xd8\xd5\xd2\xf6#7\xf7\x15\xe4y\x12\x19gpN\x96g\n\x1fAt\xe8\xff\x0f\x00\x00\x00\x00\x00\x00\x0e\xf1\xffF\xba\xf0\xfar\xc0\xf3\x92\xcc\x83\xb6\xac\xfa\x88\x1eZ\xec\xe4\'\n\x80\xfb\xd51\xc1\x1d\a\xb2?\xd59v[\'\x80pEXr\x19\x80\xf5\x11%\xfb):m\x06F&\x03\xf8\xe3\xfd\xc5\xa8\xf40\xf7\xc1\xd1\'\xca\xaf8\x91\xc4\xa9\xb2\xa7\xac\x04\xe0\xdc\x8c\x9e\x18\xe8ym\xf3<\x87\xfbW\x0f\x17\xady\x8fk\xa6J\xae', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 228.276066] input: syz1 as /devices/virtual/input/input286 [ 228.348070] input: syz1 as /devices/virtual/input/input289 [ 228.436279] input: syz1 as /devices/virtual/input/input290 18:43:56 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 18:43:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121080, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x7, 0x4) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)='/dev/input/event#\x00', 0x12, 0x3) dup2(r2, r2) open(&(0x7f0000000040)='./file0\x00', 0x103900, 0x4) 18:43:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:56 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x20, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80) getsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000fc0)=""/4096) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) 18:43:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.913986] input: syz1 as /devices/virtual/input/input292 [ 228.921656] hid-generic 0000:0000:0000.001B: ignoring exceeding usage max [ 228.931956] input: syz1 as /devices/virtual/input/input294 [ 228.943696] input: syz1 as /devices/virtual/input/input291 [ 228.953552] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on sz1 18:43:56 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x440, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(0xffffffffffffffff, r3) 18:43:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x80000000]}, 0x45c) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/393]) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xf0, 0x10001) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) dup2(r0, r2) 18:43:56 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x4382) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="c7221fc534860f28ffaec8ba2c91d389b7c7342a62d2b4407545c47d91a8272c883dd4dd58e52fffa1aa413e4fe389dec99d1b72ef7de426a363d887eb8c466bcb5ba62ba72bd914767bfb8ae091df5550d6427fd34d4e33186dc79672a889e4605ec0c9fe37cad67c61e2cfbf1ab1671c12db3dc6d01e4f1e97fad5561e7ed607d41b85565b9633dd4da2d246d1d3878f9428c8ec4ca78e86debdd87dc140627db08b28791b73be62", 0xa9}, {&(0x7f0000000380)="2d97c8340753a0a652918af1f42e149750b2c7812507b90f00dbdc68ad487aebc878e1680b349cb89433c9a05e18a405552c5ef51d1cac4d92c8e24c5e1c6ec44237a4e4622e14e8757052855645cc68b2f6ded5a03e3c18b671d8f6d5235abe34c9f1299ac768dab62ff8cf1c927b4b71d98c5ca711b319516d53b015a706e28543e8fd66ff98fef6ba0cb06fe602b458d0d99b9e90070cb90ff5b7161a9778d95f9fab9dd07e10ceffc743ba426fc0895d98490187b947cfab37eda806f0b9597cd2afe089982dd04535c6d9a70946c680d209acc78484d43b53a3079f6b20d84f027c9bafc94b7c182cbefd8c863497ef837b339475", 0xf7}, {&(0x7f0000000480)="658f07f3d1f9607918507a2a2a1a931f6522719dd04a65fa605fe9e4c273aa7abe70b511a34c79d750ae3d680fc448ccd69c5294b9f123641266f6e46fcf1fdf3c5cdd02978e9a9a5b2cceda0a3ff83b98f3d48e23d1041923d6ffc93b713e370793e30732c994173a745b1d01101e0fedf371f912be0a6bbaf8bc2c07eaa8cb07f42ef9b7eaf350b782", 0x8a}], 0x3, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x3, 0x7, 0x4d, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xf51}}], 0x30, 0x8081}, 0x40000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000600)={0x86, 0x18, [0x8, 0x7fffffff, 0xfff, 0x9, 0x3f, 0x79ebd6d2]}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) r2 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 18:43:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) [ 229.110374] input: syz1 as /devices/virtual/input/input298 [ 229.178025] input: syz1 as /devices/virtual/input/input299 [ 229.233864] input: syz1 as /devices/virtual/input/input302 [ 229.371911] input: syz1 as /devices/virtual/input/input305 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/44, 0x2c) 18:43:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000340)) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = dup2(r0, r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x3, 'syz1\x00', 0x8}, 0x5, 0x200, 0x7fffffff, r4, 0x2, 0x7fff, 'syz1\x00', &(0x7f0000000180)=['\x00', '/dev/uinput\x00'], 0xd, [], [0xfff, 0x8, 0x0, 0x80]}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x200, @rand_addr="edee5fa3a2817f1da566ec9afdec335e", 0x800}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 18:43:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(0xffffffffffffffff, r3) 18:43:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x55f, 0x109c40) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x6b0924ce4bd43e06) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) read$alg(r3, &(0x7f0000000040)=""/62, 0x3e) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000200)=""/213) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) dup2(r0, r2) 18:43:57 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) [ 229.753272] input: syz1 as /devices/virtual/input/input306 [ 229.761174] hid-generic 0000:0000:0000.001C: ignoring exceeding usage max [ 229.779339] input: syz1 as /devices/virtual/input/input308 [ 229.782061] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on sz1 [ 229.797648] input: syz1 as /devices/virtual/input/input309 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 229.806197] input: syz1 as /devices/virtual/input/input307 18:43:57 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000001c0)={0x40000000000000, 0x9, 0xa85d, 0x7825000000000, 0x401, 0x3}) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x100) 18:43:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(0xffffffffffffffff, r3) [ 229.982909] input: syz1 as /devices/virtual/input/input313 [ 230.037064] input: syz1 as /devices/virtual/input/input314 [ 230.066842] input: syz1 as /devices/virtual/input/input315 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x3f, 0x8000) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000400)={{0x4, @addr=0x9}, 0x8, 0x3f, 0x6}) r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002a0000082dbd7000ffdb53a96f3e9ae6e5a8b89fc35ec0465adf2500000000", @ANYRES32=r3, @ANYBLOB="0000e0ff08000b00f1ff0600"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x200008d0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000380)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) [ 230.084844] input: syz1 as /devices/virtual/input/input316 18:43:57 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r1, r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:57 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 230.305146] input: syz1 as /devices/virtual/input/input320 18:43:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(0xffffffffffffffff, r3) 18:43:57 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000780)='/dev/vcs#\x00', 0x7, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r3 = socket$unix(0x1, 0x1, 0x0) r4 = gettid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000680)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000700)={0x4, 0x8, 0xfa00, {r8, 0x8}}, 0x10) sendmsg$unix(r3, &(0x7f0000000600)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)="dbd849645ae3a5e768dbf7d618fc4dbe8f9848f4f4881eb5c4b52be166198378add8aaf3816878f59f9551d446d8812023719a0321", 0x35}, {&(0x7f0000000100)="832c4efbc86aa7b4ba7980058a5a13503656e4cdf75350a52f1ae3c2ff6d5036525a33b1c505e0f904b74ad94044e2dee9c31706cbc842c75ca0e55d994198f99d765cebd60aa897a6cf948cb6d259ecbc5a4af162496c2e3fc651389816cbf5b23d5654a7b984c4f1cb5fc69091dcf33cf2aa49ad4f927f613015dd71c88c2faecd1851a70a1908294c19f7943f4889e94e41e2876296f3a71df90577e197cc1bc11391a429c9fabcc2e1731bfc3308d9e14485f12e5aa1b0ed890f93", 0xbd}, {&(0x7f00000001c0)="60b7fda7f1dd89c7b8fa236e", 0xc}, {&(0x7f0000000200)="d833689b2a7980eff4e5387b89538205a45e298b122e01fe5f006ad027132a850752d761ff4c15f2f3878abdacc946eccc9f10ed0cf385ef66b42f48d52bbd28c3800e916c4f52cc59d4cedb93aa13ed59f56b10c3000f425e99638dd8bd768b59ebc93019f699b1c5527830dd34adee1666d18881ac0d11e0bbad83dfded949f36ed39aa7e3da67d12be73c7b01ea4879a8ae6e583648e915c264c816c585042a9955", 0xa3}, {&(0x7f00000002c0)="4c1f705feeb892241413420331db4fa19c1a96af6bd7e72c4ad8a1dd563e5ad144f3200b2dd934e3719a766e68ad8653d7601e3e89aae3a378e1c2ff6642477a4799d6842fb9120ea864adefbe94883bddae09aaf5ea47a01e590dbe7fe48dc6a53478aed87009b4cc079298c5fd1cade79c", 0x72}], 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="2484b300e30000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2], 0x90, 0x4000000}, 0x20048884) r9 = dup2(r1, r2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000740)={0x2}) 18:43:57 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4400, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xd000, 0xf000, 0x1, 0x5, 0x6}) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4400, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x5e, 0xe, 0x4, 0x7, 0x10000, 0x20, 0x200, [@mcast2, @empty, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, @loopback]}, 0x78) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:43:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 230.587523] input: syz1 as /devices/virtual/input/input321 [ 230.618765] input: syz1 as /devices/virtual/input/input322 18:43:57 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)='-ppp0cgroupself\x00', 0x10, 0x1) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 230.639703] input: syz1 as /devices/virtual/input/input323 [ 230.670611] input: syz1 as /devices/virtual/input/input324 18:43:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 230.783688] input: syz1 as /devices/virtual/input/input325 [ 230.819831] input: syz1 as /devices/virtual/input/input326 [ 230.827189] input: syz1 as /devices/virtual/input/input327 18:43:58 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2100, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000040)=0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0xfffffffffffffff9) dup2(r0, r1) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:58 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ffff000000000094ec70e5003fc3486a96c86a65c939375aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xfffffffffffffffc, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0xf, 0x9, 0x9}, &(0x7f00000001c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x4}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r1, 0x4) 18:43:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:43:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) dup2(r0, r1) 18:43:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.004730] input: syz1 as /devices/virtual/input/input330 [ 231.063591] input: syz1 as /devices/virtual/input/input331 [ 231.079871] input: syz1 as /devices/virtual/input/input332 18:43:58 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x400000000, 0xafdec31253e5bce3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x100, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x5, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0xf, 0x6}, &(0x7f0000000280)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x1000}}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000100)={0x3, 0x6}) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.110852] input: syz1 as /devices/virtual/input/input333 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') dup2(r5, r3) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.222594] input: syz1 as /devices/virtual/input/input337 18:43:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:43:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:58 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x82c80, 0x0) faccessat(r1, &(0x7f0000000200)='./file0\x00', 0xc0, 0xea10e521db8eb8ad) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 231.292503] input: syz1 as /devices/virtual/input/input338 18:43:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r0) 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.366799] input: syz1 as /devices/virtual/input/input341 18:43:58 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') dup2(r5, r3) [ 231.456438] input: syz1 as /devices/virtual/input/input343 [ 231.471264] input: syz1 as /devices/virtual/input/input344 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:43:58 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x40100) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000001c0)={0xaef77d25e96a2220, 0x4}) chdir(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef9be01fa8dff6aeaf0b688c05a5bef0ad9cfbe93fc6bd2a84db9ebea2523579e2a943ebc2c03d842ec8ab4712731e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c6731ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4"], 0x80) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 231.554277] input: syz1 as /devices/virtual/input/input345 18:43:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.620626] input: syz1 as /devices/virtual/input/input347 18:43:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') dup2(r5, r3) 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.671005] input: syz1 as /devices/virtual/input/input349 18:43:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@rand_addr="843f08ba5457c13c4d6daba0b7cd2e9e", @ipv4={[], [], @multicast2}, @mcast2, 0x7, 0x800, 0x3, 0x500, 0x10001, 0x20, r3}) dup2(r0, r1) 18:43:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x30c40000, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r0, r1) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz0\x00') 18:43:59 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73a575cce45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22ee98d5fe111b7253fa0fe4499eaff65f4fe730f5c17eae47d8abb1bb9b05047572ab892728e15b0caecb147e250234277b9de997cf26ff55719b417f40710dabca13c35fe8fbb7c4b9f244fb06f87ff72c928d38f8df8eb4b6877b7c441c505a957f54aead569d851ebce58ae994080092d9607fc653c17fde90af54d1df0d94ede01937c9c00bc7d8081afe36de6b7685fd84c576a21367aea432fb7bd04394ab3e6ad93c75fd455b6fcbadf9aada6a7d500e26e6c4598ad621cb07b6e99e6ef88e8f3be1cec2ec0733d7c464fdebc14c6d2bec8b63d354789d54aeb420595f89d195a58fc5cf90fd4b76fbbd4a8b328a9f715c05df87e0d8fc886d80bbda32f08dc48b20e7eb2fa11d258ec05891c10d15e547615df5f1e8"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.826841] input: syz1 as /devices/virtual/input/input352 [ 231.843790] input: syz1 as /devices/virtual/input/input353 [ 231.858501] input: syz1 as /devices/virtual/input/input354 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.910918] input: syz1 as /devices/virtual/input/input355 18:43:59 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0xffffffffffffffeb) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:43:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 232.020744] input: syz1 as /devices/virtual/input/input359 18:43:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:43:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:43:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r1, r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3f) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000180)={0x8, 'syz1\x00'}) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000040)={&(0x7f00000000c0)=""/110, 0x6e}) 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 232.108426] input: syz1 as /devices/virtual/input/input363 18:43:59 executing program 2: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 232.177382] input: syz1 as /devices/virtual/input/input365 [ 232.188966] input: syz1 as /devices/virtual/input/input364 [ 232.202296] input: syz1 as /devices/virtual/input/input366 [ 232.232621] input: syz1 as /devices/virtual/input/input367 18:43:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 18:43:59 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x12) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x800) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000000c0)) dup(r2) 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 18:43:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 232.363567] input: syz1 as /devices/virtual/input/input370 [ 232.371228] input: syz1 as /devices/virtual/input/input371 18:43:59 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) timer_create(0x439c7fd7b490eff6, &(0x7f0000000200)={0x0, 0xd, 0x1, @tid=r2}, &(0x7f0000000240)) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x1000}, 0x1) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) dup2(r1, r3) [ 232.442322] input: syz1 as /devices/virtual/input/input372 [ 232.460730] input: syz1 as /devices/virtual/input/input374 18:43:59 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000380)={0xaaa, 0xf0}) r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0x3) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x6) name_to_handle_at(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x14, 0xfffffffffffffff7, "35f1a61e338fbcbede3f805b"}, &(0x7f0000000240), 0x1400) write$P9_RFLUSH(r2, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000140)={0xa, 0x7, 0x800, 0x7}, 0xa) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:43:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x101000) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:43:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) [ 232.528542] input: syz1 as /devices/virtual/input/input376 18:43:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:43:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(r4, r3) 18:43:59 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000100)={0x54}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) [ 232.645469] input: syz1 as /devices/virtual/input/input377 [ 232.675491] input: syz1 as /devices/virtual/input/input378 [ 232.693267] input: syz1 as /devices/virtual/input/input379 [ 232.706520] input: syz1 as /devices/virtual/input/input381 [ 232.727681] input: syz1 as /devices/virtual/input/input380 18:44:00 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) sched_setparam(r0, &(0x7f0000000600)=0x984) r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="73a575ccefdbe06d5a0d6ed7c3bbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005c40)={0x0, @rand_addr, @empty}, &(0x7f0000005c80)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005cc0)={@loopback, 0x59, r3}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000640), &(0x7f0000000680)=0x4) getresuid(&(0x7f0000000280), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x6, r4}, {0x2, 0x4, r5}, {0x2, 0x3, r6}], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x3c, 0x1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000700)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 18:44:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ftruncate(r0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:44:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x282802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x3, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x3, @local, 0x1}, @in6={0xa, 0x4e21, 0x40, @mcast1}, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @rand_addr=0x3}], 0xa0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="154b7c1db1f7ada57bf670") r2 = socket$inet(0x10, 0x2, 0xc) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010907041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8776b7d4fe3a2bdf4d37ed01cc0", 0x4c}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x2000) dup2(r0, r3) 18:44:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 18:44:00 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) [ 232.855347] input: syz1 as /devices/virtual/input/input383 18:44:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(r4, r3) 18:44:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r1, r0) 18:44:00 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9cfbe93fc6bd2a83db9ebea2523579e2a943ebc2c03f442ec8ab4712531e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c67a1ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4bccf2208ff22"], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 232.954390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 232.975023] input: syz1 as /devices/virtual/input/input386 [ 233.007096] input: syz1 as /devices/virtual/input/input387 [ 233.027764] input: syz1 as /devices/virtual/input/input388 [ 233.041760] input: syz1 as /devices/virtual/input/input389 18:44:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) [ 233.067491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r3) dup2(r4, r3) 18:44:00 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 233.156593] input: syz1 as /devices/virtual/input/input391 [ 233.205999] input: syz1 as /devices/virtual/input/input392 [ 233.229032] input: syz1 as /devices/virtual/input/input393 18:44:00 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x40100) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000001c0)={0xaef77d25e96a2220, 0x4}) chdir(&(0x7f0000000180)='./file0\x00') r1 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="73a575ccefbbc44b0a03a9e45afc4ef9be01fa8dff6aeaf0b688c05a5bef0ad9cfbe93fc6bd2a84db9ebea2523579e2a943ebc2c03d842ec8ab4712731e6e3d021fdf6b8ff2137a52dc71c80e2c56001709c6731ec8cb09597ca220c3fc3486e96c86a85e981c45aa49593e75cc30a05287eb5f45da4"], 0x80) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) [ 233.254120] input: syz1 as /devices/virtual/input/input394 [ 233.266464] input: syz1 as /devices/virtual/input/input395 18:44:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x802) connect$vsock_stream(r2, &(0x7f00000000c0), 0x10) dup2(r0, r1) [ 233.314665] input: syz1 as /devices/virtual/input/input396 18:44:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) dup2(r4, 0xffffffffffffffff) [ 233.391210] input: syz1 as /devices/virtual/input/input397 18:44:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xfea00000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, [], 0x11}, 0xd6c8}, @in6={0xa, 0x4e24, 0xb650, @mcast1, 0x2}], 0x54) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:44:00 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:44:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) bind$x25(r6, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) dup2(r5, r3) [ 233.486274] input: syz1 as /devices/virtual/input/input398 [ 233.507520] input: syz1 as /devices/virtual/input/input399 [ 233.539034] input: syz1 as /devices/virtual/input/input402 [ 233.557813] input: syz1 as /devices/virtual/input/input401 [ 233.577248] input: syz1 as /devices/virtual/input/input403 18:44:00 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0xe86c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r1, r2) acct(&(0x7f0000000000)='./file0\x00') 18:44:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) dup2(r4, 0xffffffffffffffff) 18:44:01 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 233.702687] input: syz1 as /devices/virtual/input/input404 [ 233.730903] input: syz1 as /devices/virtual/input/input406 [ 233.736665] input: syz1 as /devices/virtual/input/input405 [ 233.747736] input: syz1 as /devices/virtual/input/input407 18:44:01 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 233.801582] input: syz1 as /devices/virtual/input/input408 18:44:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 233.851329] hid-generic 0000:0000:0000.001D: ignoring exceeding usage max [ 233.863887] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on sz1 [ 233.881710] input: syz1 as /devices/virtual/input/input409 18:44:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) dup2(r4, 0xffffffffffffffff) [ 233.933601] FAULT_INJECTION: forcing a failure. [ 233.933601] name failslab, interval 1, probability 0, space 0, times 0 [ 233.947431] CPU: 0 PID: 11457 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 233.954547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.954563] Call Trace: [ 233.954580] dump_stack+0x138/0x19c [ 233.954600] should_fail.cold+0x10f/0x159 [ 233.966519] should_failslab+0xdb/0x130 [ 233.966533] kmem_cache_alloc_trace+0x2e9/0x790 [ 233.966546] ? lock_downgrade+0x6e0/0x6e0 [ 233.966557] ? mutex_trylock+0x1c0/0x1c0 [ 233.966572] ? devm_device_remove_groups+0x50/0x50 [ 233.966585] kobject_uevent_env+0x378/0xc23 [ 233.974323] ? wait_for_completion+0x420/0x420 [ 233.974345] kobject_uevent+0x20/0x26 [ 233.974355] device_del+0x65c/0xaa0 [ 233.974368] ? __device_links_no_driver+0x220/0x220 [ 233.974380] ? refcount_dec_and_test+0x1b/0x20 [ 233.974393] device_destroy+0x89/0xc0 [ 233.982996] ? root_device_unregister+0x80/0x80 [ 233.983012] hidraw_disconnect+0xf9/0x2b0 [ 233.983022] hid_disconnect+0x10b/0x180 [ 233.983031] hid_device_remove+0x179/0x230 [ 233.983045] device_release_driver_internal+0x2a9/0x540 [ 233.983051] ? hid_hw_close+0xd0/0xd0 [ 233.983062] device_release_driver+0x1a/0x20 [ 233.983073] bus_remove_device+0x2f0/0x4b0 [ 234.000470] device_del+0x3ce/0xaa0 [ 234.000486] ? lock_downgrade+0x6e0/0x6e0 [ 234.000495] ? __device_links_no_driver+0x220/0x220 [ 234.000512] hid_destroy_device+0xe4/0x160 [ 234.000523] uhid_dev_destroy+0x9c/0x100 18:44:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"/4108], 0x100c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4, 0x20000) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) [ 234.000531] uhid_char_write+0xab9/0xf00 [ 234.000545] __vfs_write+0x105/0x6b0 [ 234.000555] ? uhid_hid_stop+0x90/0x90 [ 234.000564] ? kernel_read+0x120/0x120 [ 234.000574] ? __inode_security_revalidate+0xd6/0x130 [ 234.000584] ? avc_policy_seqno+0x9/0x20 [ 234.000595] ? selinux_file_permission+0x85/0x480 [ 234.008949] ? security_file_permission+0x89/0x1f0 [ 234.008963] ? rw_verify_area+0xea/0x2b0 [ 234.008977] vfs_write+0x198/0x500 [ 234.008990] SyS_write+0xfd/0x230 [ 234.009002] ? SyS_read+0x230/0x230 [ 234.009016] ? do_syscall_64+0x53/0x640 [ 234.017615] ? SyS_read+0x230/0x230 [ 234.017628] do_syscall_64+0x1e8/0x640 [ 234.017638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.017654] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 234.017662] RIP: 0033:0x459829 [ 234.017668] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.017679] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 234.017685] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:01 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(0xffffffffffffffff, r0) [ 234.017689] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 234.017696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 234.026039] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 234.206470] FAULT_INJECTION: forcing a failure. [ 234.206470] name failslab, interval 1, probability 0, space 0, times 0 [ 234.218522] input: syz1 as /devices/virtual/input/input412 [ 234.227634] input: syz1 as /devices/virtual/input/input411 [ 234.260816] CPU: 1 PID: 11451 Comm: syz-executor.3 Not tainted 4.14.139 #35 [ 234.267959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.277318] Call Trace: [ 234.279914] dump_stack+0x138/0x19c [ 234.283567] should_fail.cold+0x10f/0x159 [ 234.287715] should_failslab+0xdb/0x130 [ 234.291681] __kmalloc_track_caller+0x2ec/0x790 [ 234.296331] ? pointer+0xb10/0xb10 [ 234.299848] ? kasprintf+0xa2/0xbe [ 234.303367] kvasprintf+0xa7/0x110 [ 234.306886] ? bust_spinlocks+0xc0/0xc0 [ 234.310845] kasprintf+0xa2/0xbe [ 234.314190] ? kvasprintf_const+0x170/0x170 [ 234.318489] ? save_trace+0x290/0x290 [ 234.322275] ? save_trace+0x290/0x290 [ 234.326064] ? save_trace+0x290/0x290 [ 234.329845] ? input_default_getkeycode+0x4d0/0x4d0 [ 234.334836] input_devnode+0x4c/0x90 [ 234.338554] device_get_devnode+0x170/0x2e0 [ 234.342855] devtmpfs_delete_node+0x9b/0x170 [ 234.347240] ? devtmpfs_create_node+0x220/0x220 [ 234.351887] ? refcount_sub_and_test+0x8d/0xf0 [ 234.356453] ? refcount_dec_and_test+0x1b/0x20 [ 234.361025] ? kobject_put+0x6d/0x80 [ 234.364722] ? klist_children_put+0x44/0x50 [ 234.369022] ? klist_put+0xc6/0x160 [ 234.372627] device_del+0x799/0xaa0 [ 234.376235] ? __device_links_no_driver+0x220/0x220 [ 234.381248] cdev_device_del+0x1a/0x70 [ 234.385127] evdev_disconnect+0x42/0xb0 [ 234.389086] __input_unregister_device+0x1eb/0x480 [ 234.394001] input_unregister_device+0xa9/0xf0 [ 234.398570] uinput_destroy_device+0x1ce/0x220 [ 234.403132] uinput_ioctl_handler.isra.0+0x129/0x18a0 [ 234.408312] ? uinput_request_submit.part.0+0x290/0x290 [ 234.413673] ? __might_sleep+0x93/0xb0 [ 234.417541] ? __fget+0x210/0x370 [ 234.420975] ? uinput_compat_ioctl+0xa0/0xa0 [ 234.425362] uinput_ioctl+0x4a/0x60 [ 234.428965] do_vfs_ioctl+0x7ae/0x1060 [ 234.432829] ? selinux_file_mprotect+0x5d0/0x5d0 [ 234.437560] ? lock_downgrade+0x6e0/0x6e0 [ 234.441683] ? ioctl_preallocate+0x1c0/0x1c0 [ 234.446068] ? __fget+0x237/0x370 [ 234.449501] ? security_file_ioctl+0x89/0xb0 [ 234.453888] SyS_ioctl+0x8f/0xc0 [ 234.457231] ? do_vfs_ioctl+0x1060/0x1060 [ 234.461363] do_syscall_64+0x1e8/0x640 [ 234.465238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.470105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 234.475276] RIP: 0033:0x459829 [ 234.478443] RSP: 002b:00007f1922f2cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.486126] RAX: ffffffffffffffda RBX: 00007f1922f2cc90 RCX: 0000000000459829 [ 234.493376] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 234.500622] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 234.507879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1922f2d6d4 [ 234.515135] R13: 00000000004c4596 R14: 00000000004d8880 R15: 0000000000000004 [ 234.523671] input: syz1 as /devices/virtual/input/input410 18:44:01 executing program 3: set_robust_list(&(0x7f0000000200)={&(0x7f0000000140), 0x4, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @rand_addr=0xffffffff8f9805fe}}, 0xed3b, 0x80, 0xece, 0x8, 0x2}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={r1, 0xd4, "2a7ebbdb679c237da89bca189535357792cfe0b3ca60915d8ec119d185728a809ddcab5840fb2f300491b278ab36d35182ea084be2fc89907b48bfb165398b8e60ebac7cdd75c8d992533bdda20522faecd4eb935f71cb0b63eec0877bb72c6b2b9ebb5aad3388dc96654ba052b4c1f31bfcb614469d76edb51a0f3357b3c607cb69f70b2ab0a76b934f388dc3c422235f6165b23dfe10e49b82ddeabcfe2369c54be2c8954007306321d97d9a264f9c099ce1901c13f8c2a64c6cd15ed60a829d0ea621df1b7a02391a177d31825c56c2429bbf"}, &(0x7f0000000540)=0xdc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000280)=""/52, &(0x7f00000002c0)=0x34) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x1) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x20000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L='version=9p2000.L'}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'syz'}}, {@dont_appraise='dont_appraise'}, {@obj_role={'obj_role', 0x3d, '-'}}]}}) r5 = request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='#em1bdev@ppp0nodev[\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0xb002000) 18:44:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) [ 234.613914] input: syz1 as /devices/virtual/input/input413 [ 234.623414] input: syz1 as /devices/virtual/input/input414 18:44:01 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101002, 0x0) ioctl$TCSETXW(r1, 0x5435, &(0x7f00000000c0)={0x4f06473b, 0x80000001, [0xff, 0x6, 0x9d90, 0x5, 0x6], 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:44:02 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 234.748581] hid-generic 0000:0000:0000.001E: ignoring exceeding usage max [ 234.776713] input: syz1 as /devices/virtual/input/input415 [ 234.786609] input: syz1 as /devices/virtual/input/input416 [ 234.801462] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on sz1 [ 234.819164] input: syz1 as /devices/virtual/input/input418 [ 234.836570] FAULT_INJECTION: forcing a failure. [ 234.836570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.848502] CPU: 1 PID: 11511 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 234.848510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.848515] Call Trace: [ 234.848532] dump_stack+0x138/0x19c [ 234.848550] should_fail.cold+0x10f/0x159 [ 234.848568] __alloc_pages_nodemask+0x1d6/0x7a0 [ 234.875330] ? __alloc_pages_slowpath+0x2930/0x2930 [ 234.884994] cache_grow_begin+0x80/0x400 [ 234.885010] kmem_cache_alloc_trace+0x6b2/0x790 [ 234.885024] ? mutex_trylock+0x1c0/0x1c0 [ 234.885037] ? devm_device_remove_groups+0x50/0x50 [ 234.897777] kobject_uevent_env+0x378/0xc23 [ 234.897789] ? wait_for_completion+0x420/0x420 [ 234.897808] kobject_uevent+0x20/0x26 [ 234.897818] device_del+0x65c/0xaa0 [ 234.897830] ? __device_links_no_driver+0x220/0x220 [ 234.907047] ? refcount_dec_and_test+0x1b/0x20 [ 234.915386] device_destroy+0x89/0xc0 [ 234.915396] ? root_device_unregister+0x80/0x80 [ 234.915413] hidraw_disconnect+0xf9/0x2b0 [ 234.915424] hid_disconnect+0x10b/0x180 [ 234.915435] hid_device_remove+0x179/0x230 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 234.915450] device_release_driver_internal+0x2a9/0x540 [ 234.928617] ? hid_hw_close+0xd0/0xd0 [ 234.928634] device_release_driver+0x1a/0x20 [ 234.928643] bus_remove_device+0x2f0/0x4b0 [ 234.928657] device_del+0x3ce/0xaa0 [ 234.928670] ? lock_downgrade+0x6e0/0x6e0 [ 234.928680] ? __device_links_no_driver+0x220/0x220 [ 234.934702] input: syz1 as /devices/virtual/input/input419 [ 234.937127] hid_destroy_device+0xe4/0x160 [ 234.937139] uhid_dev_destroy+0x9c/0x100 [ 234.937151] uhid_char_write+0xab9/0xf00 [ 234.937166] __vfs_write+0x105/0x6b0 [ 234.937176] ? uhid_hid_stop+0x90/0x90 [ 234.937186] ? kernel_read+0x120/0x120 [ 234.974984] ? __inode_security_revalidate+0xd6/0x130 [ 234.974995] ? avc_policy_seqno+0x9/0x20 [ 234.975006] ? selinux_file_permission+0x85/0x480 [ 234.989834] ? security_file_permission+0x89/0x1f0 [ 234.989849] ? rw_verify_area+0xea/0x2b0 [ 234.989863] vfs_write+0x198/0x500 [ 234.989876] SyS_write+0xfd/0x230 [ 234.989887] ? SyS_read+0x230/0x230 [ 234.989897] ? do_syscall_64+0x53/0x640 [ 234.989906] ? SyS_read+0x230/0x230 [ 235.039394] do_syscall_64+0x1e8/0x640 [ 235.039405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.039423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.039431] RIP: 0033:0x459829 [ 235.039436] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.039447] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 235.039454] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 235.047020] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:44:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 235.047026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 235.047032] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xab74, 0x80) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x40}, &(0x7f0000000180)=0x8) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r3) 18:44:02 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:44:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2000) [ 235.234082] input: syz1 as /devices/virtual/input/input424 [ 235.260831] input: syz1 as /devices/virtual/input/input425 [ 235.301887] input: syz1 as /devices/virtual/input/input426 [ 235.333997] input: syz1 as /devices/virtual/input/input428 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) [ 235.357499] input: syz1 as /devices/virtual/input/input429 [ 235.424262] input: syz1 as /devices/virtual/input/input430 18:44:02 executing program 2 (fault-call:3 fault-nth:2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r4, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r6, 0x40049409, r3) dup2(r5, r3) 18:44:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:44:02 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 235.531647] input: syz1 as /devices/virtual/input/input432 18:44:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r2) [ 235.618227] hid-generic 0000:0000:0000.001F: ignoring exceeding usage max [ 235.644161] input: syz1 as /devices/virtual/input/input434 [ 235.655909] input: syz1 as /devices/virtual/input/input436 [ 235.665091] input: syz1 as /devices/virtual/input/input435 [ 235.687507] input: syz1 as /devices/virtual/input/input437 [ 235.688127] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:03 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r2) dup2(r4, r2) [ 235.758209] FAULT_INJECTION: forcing a failure. [ 235.758209] name failslab, interval 1, probability 0, space 0, times 0 [ 235.773453] CPU: 0 PID: 11608 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 235.780568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.789960] Call Trace: [ 235.792554] dump_stack+0x138/0x19c [ 235.796192] should_fail.cold+0x10f/0x159 [ 235.800348] should_failslab+0xdb/0x130 [ 235.804323] kmem_cache_alloc_node+0x287/0x780 [ 235.808915] __alloc_skb+0x9c/0x500 [ 235.812542] ? skb_scrub_packet+0x4b0/0x4b0 [ 235.816855] ? netlink_has_listeners+0x20a/0x330 [ 235.816870] kobject_uevent_env+0x781/0xc23 [ 235.816880] ? wait_for_completion+0x420/0x420 [ 235.816899] kobject_uevent+0x20/0x26 [ 235.816909] device_del+0x65c/0xaa0 [ 235.816923] ? __device_links_no_driver+0x220/0x220 [ 235.816934] ? refcount_dec_and_test+0x1b/0x20 [ 235.830585] device_destroy+0x89/0xc0 [ 235.830595] ? root_device_unregister+0x80/0x80 18:44:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 235.830612] hidraw_disconnect+0xf9/0x2b0 [ 235.830624] hid_disconnect+0x10b/0x180 [ 235.830635] hid_device_remove+0x179/0x230 [ 235.830650] device_release_driver_internal+0x2a9/0x540 [ 235.830657] ? hid_hw_close+0xd0/0xd0 [ 235.830670] device_release_driver+0x1a/0x20 [ 235.830678] bus_remove_device+0x2f0/0x4b0 [ 235.830691] device_del+0x3ce/0xaa0 [ 235.830703] ? lock_downgrade+0x6e0/0x6e0 [ 235.830712] ? __device_links_no_driver+0x220/0x220 [ 235.830724] hid_destroy_device+0xe4/0x160 [ 235.830733] uhid_dev_destroy+0x9c/0x100 [ 235.830743] uhid_char_write+0xab9/0xf00 [ 235.830756] __vfs_write+0x105/0x6b0 [ 235.838142] ? uhid_hid_stop+0x90/0x90 [ 235.868438] ? kernel_read+0x120/0x120 [ 235.868452] ? __inode_security_revalidate+0xd6/0x130 [ 235.868464] ? avc_policy_seqno+0x9/0x20 [ 235.868475] ? selinux_file_permission+0x85/0x480 [ 235.868488] ? security_file_permission+0x89/0x1f0 [ 235.868499] ? rw_verify_area+0xea/0x2b0 [ 235.877637] vfs_write+0x198/0x500 [ 235.877651] SyS_write+0xfd/0x230 [ 235.877663] ? SyS_read+0x230/0x230 [ 235.877674] ? do_syscall_64+0x53/0x640 [ 235.877684] ? SyS_read+0x230/0x230 [ 235.877696] do_syscall_64+0x1e8/0x640 [ 235.877703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.877718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 235.886320] RIP: 0033:0x459829 [ 235.980805] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.988504] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 235.995753] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:03 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r2) dup2(r4, r2) [ 236.003007] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 236.010265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 236.017512] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 236.036435] input: syz1 as /devices/virtual/input/input438 [ 236.046671] input: syz1 as /devices/virtual/input/input439 18:44:03 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x101102, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000280)=0x23fc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x41004}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="91000000", @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf2516000000300005002c000200080001001100000008000200ffffff7f080004000400000008000300ff0f0000080003000900000010000600080001000600000004000200380004000c00010073797a30000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) ioctl$UI_DEV_DESTROY(r1, 0x5502) r6 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000040)={0x9, 0x0, 0x7f, 0x8}) dup2(r1, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000002c0)={0x1, 0x1, 0xacd, 0x3, 'syz0\x00', 0xfffffffffffffffb}) 18:44:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xfffffffffffff6a4, 0x4, [0x80000001, 0x738f, 0x4, 0x7]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @rand_addr=0xfffffffffffffffd}}, 0x7fff80000000, 0x7}, &(0x7f00000001c0)=0x90) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000200)=""/237) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x458, 0x138, 0x0, 0x138, 0x200, 0x138, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x100, 0x20, 0x1, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x9d14, 0x3, 0x0, 0x0, "7835bc2311cdec6d73f784d00e2743dacb5691f96d2bab950bbc38119f47ede8867eb86167e6c82fe5dc1f72f65c4a84f3a126165498a725a20404c1cab7892e"}}}, {{@uncond, 0x0, 0x98, 0xc8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xb8000000000, 0x4, 0x5}, {0x9, 0x400}, 0x101, 0x3}}}, {{@ip={@multicast1, @empty, 0xff000000, 0x0, 'syz_tun\x00', 'teql0\x00', {}, {}, 0x0, 0x2, 0x8}, 0x0, 0x98, 0x1c0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) [ 236.115598] input: syz1 as /devices/virtual/input/input441 18:44:03 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r5, 0x40049409, r2) dup2(r4, r2) [ 236.171576] input: syz1 as /devices/virtual/input/input442 [ 236.219055] input: syz1 as /devices/virtual/input/input443 [ 236.245264] input: syz1 as /devices/virtual/input/input444 18:44:03 executing program 2 (fault-call:3 fault-nth:3): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:03 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x1}) 18:44:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x1) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:03 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 236.362771] input: syz1 as /devices/virtual/input/input445 18:44:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 236.458438] input: syz1 as /devices/virtual/input/input446 [ 236.466723] input: syz1 as /devices/virtual/input/input447 [ 236.482607] input: syz1 as /devices/virtual/input/input449 [ 236.489984] input: syz1 as /devices/virtual/input/input450 [ 236.507590] hid-generic 0000:0000:0000.0020: ignoring exceeding usage max [ 236.514689] input: syz1 as /devices/virtual/input/input448 [ 236.549604] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on sz1 [ 236.584970] input: syz1 as /devices/virtual/input/input451 [ 236.591538] FAULT_INJECTION: forcing a failure. [ 236.591538] name failslab, interval 1, probability 0, space 0, times 0 [ 236.603737] CPU: 0 PID: 11676 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 236.610855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.620209] Call Trace: [ 236.622794] dump_stack+0x138/0x19c [ 236.626407] should_fail.cold+0x10f/0x159 [ 236.630560] should_failslab+0xdb/0x130 [ 236.634529] kmem_cache_alloc_node+0x287/0x780 [ 236.634548] __alloc_skb+0x9c/0x500 [ 236.634557] ? skb_scrub_packet+0x4b0/0x4b0 [ 236.634571] ? netlink_has_listeners+0x20a/0x330 [ 236.643177] kobject_uevent_env+0x781/0xc23 [ 236.643188] ? wait_for_completion+0x420/0x420 [ 236.643207] kobject_uevent+0x20/0x26 [ 236.643217] device_del+0x65c/0xaa0 [ 236.643229] ? __device_links_no_driver+0x220/0x220 [ 236.643241] ? refcount_dec_and_test+0x1b/0x20 [ 236.678073] device_destroy+0x89/0xc0 [ 236.681861] ? root_device_unregister+0x80/0x80 [ 236.686527] hidraw_disconnect+0xf9/0x2b0 [ 236.694909] hid_disconnect+0x10b/0x180 [ 236.698865] hid_device_remove+0x179/0x230 [ 236.703089] device_release_driver_internal+0x2a9/0x540 [ 236.708429] ? hid_hw_close+0xd0/0xd0 [ 236.712218] device_release_driver+0x1a/0x20 [ 236.716611] bus_remove_device+0x2f0/0x4b0 [ 236.720836] device_del+0x3ce/0xaa0 [ 236.724451] ? lock_downgrade+0x6e0/0x6e0 [ 236.728583] ? __device_links_no_driver+0x220/0x220 [ 236.733589] hid_destroy_device+0xe4/0x160 [ 236.737810] uhid_dev_destroy+0x9c/0x100 [ 236.741860] uhid_char_write+0xab9/0xf00 [ 236.745909] __vfs_write+0x105/0x6b0 [ 236.749599] ? uhid_hid_stop+0x90/0x90 [ 236.753471] ? kernel_read+0x120/0x120 [ 236.757358] ? __inode_security_revalidate+0xd6/0x130 [ 236.762527] ? avc_policy_seqno+0x9/0x20 [ 236.766565] ? selinux_file_permission+0x85/0x480 [ 236.771399] ? security_file_permission+0x89/0x1f0 [ 236.776316] ? rw_verify_area+0xea/0x2b0 [ 236.780375] vfs_write+0x198/0x500 [ 236.783912] SyS_write+0xfd/0x230 [ 236.787354] ? SyS_read+0x230/0x230 [ 236.790970] ? do_syscall_64+0x53/0x640 [ 236.794942] ? SyS_read+0x230/0x230 [ 236.798557] do_syscall_64+0x1e8/0x640 [ 236.802426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.807248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 236.812948] RIP: 0033:0x459829 [ 236.816134] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.823833] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 236.831088] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 236.838344] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 18:44:04 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0xbe, 0x0, 0x2006, 0x6, 0x8001, {0x5, 0x1ff}, 0x1}) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 236.845634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 236.852901] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 236.894190] input: syz1 as /devices/virtual/input/input453 18:44:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x82800, 0x10) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 236.937675] input: syz1 as /devices/virtual/input/input454 18:44:04 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:04 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) r3 = dup2(r1, r2) fcntl$setflags(r3, 0x2, 0x1) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000080)={0x7fff, 0x3f, 0x7, 0x7fffffff, 0x6, 0x101}) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) [ 237.012591] input: syz1 as /devices/virtual/input/input455 [ 237.045722] input: syz1 as /devices/virtual/input/input456 [ 237.053154] input: syz1 as /devices/virtual/input/input457 18:44:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 237.092147] input: syz1 as /devices/virtual/input/input458 [ 237.153038] input: syz1 as /devices/virtual/input/input459 [ 237.185461] input: syz1 as /devices/virtual/input/input460 [ 237.233777] input: syz1 as /devices/virtual/input/input461 18:44:04 executing program 2 (fault-call:3 fault-nth:4): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:04 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:04 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 237.274472] input: syz1 as /devices/virtual/input/input462 18:44:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1fffffffffffffe, 0x2001) r2 = dup2(r0, r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0xffffffffffff8040, 0x0, 0x800000000000000, 0x88d}) [ 237.326780] input: syz1 as /devices/virtual/input/input463 [ 237.334942] hid-generic 0000:0000:0000.0021: ignoring exceeding usage max [ 237.343219] input: syz1 as /devices/virtual/input/input464 [ 237.351715] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on sz1 [ 237.363435] input: syz1 as /devices/virtual/input/input465 18:44:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xea7, 0x0) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/96, 0x60) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x578ff7b50cb8d41a, 0x0) 18:44:04 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 237.453991] FAULT_INJECTION: forcing a failure. [ 237.453991] name failslab, interval 1, probability 0, space 0, times 0 [ 237.499131] CPU: 1 PID: 11741 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 237.506266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.515617] Call Trace: [ 237.515636] dump_stack+0x138/0x19c [ 237.515653] should_fail.cold+0x10f/0x159 [ 237.515668] should_failslab+0xdb/0x130 [ 237.525986] kmem_cache_alloc_node+0x287/0x780 [ 237.526005] __alloc_skb+0x9c/0x500 [ 237.526015] ? skb_scrub_packet+0x4b0/0x4b0 [ 237.534541] ? kobject_uevent_env+0x728/0xc23 [ 237.534554] kobject_uevent_env+0x781/0xc23 [ 237.534563] ? wait_for_completion+0x420/0x420 [ 237.534582] kobject_uevent+0x20/0x26 [ 237.542483] device_del+0x65c/0xaa0 [ 237.542497] ? __device_links_no_driver+0x220/0x220 [ 237.542507] ? refcount_dec_and_test+0x1b/0x20 [ 237.542518] device_destroy+0x89/0xc0 [ 237.542526] ? root_device_unregister+0x80/0x80 [ 237.542540] hidraw_disconnect+0xf9/0x2b0 [ 237.542551] hid_disconnect+0x10b/0x180 [ 237.551331] hid_device_remove+0x179/0x230 [ 237.551348] device_release_driver_internal+0x2a9/0x540 [ 237.551354] ? hid_hw_close+0xd0/0xd0 [ 237.551365] device_release_driver+0x1a/0x20 [ 237.551373] bus_remove_device+0x2f0/0x4b0 [ 237.551384] device_del+0x3ce/0xaa0 [ 237.551402] ? lock_downgrade+0x6e0/0x6e0 [ 237.559759] ? __device_links_no_driver+0x220/0x220 [ 237.559776] hid_destroy_device+0xe4/0x160 [ 237.559786] uhid_dev_destroy+0x9c/0x100 [ 237.559798] uhid_char_write+0xab9/0xf00 [ 237.572996] __vfs_write+0x105/0x6b0 [ 237.573009] ? uhid_hid_stop+0x90/0x90 [ 237.573020] ? kernel_read+0x120/0x120 [ 237.647917] ? __inode_security_revalidate+0xd6/0x130 [ 237.653103] ? avc_policy_seqno+0x9/0x20 [ 237.657146] ? selinux_file_permission+0x85/0x480 [ 237.661966] ? security_file_permission+0x89/0x1f0 [ 237.666875] ? rw_verify_area+0xea/0x2b0 [ 237.670915] vfs_write+0x198/0x500 [ 237.674441] SyS_write+0xfd/0x230 [ 237.677892] ? SyS_read+0x230/0x230 [ 237.681495] ? do_syscall_64+0x53/0x640 [ 237.685450] ? SyS_read+0x230/0x230 [ 237.689066] do_syscall_64+0x1e8/0x640 [ 237.692932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.697758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 237.702928] RIP: 0033:0x459829 [ 237.706102] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.713788] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 237.721037] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 237.728284] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 237.735547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 237.742808] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 237.753939] input: syz1 as /devices/virtual/input/input466 [ 237.764999] input: syz1 as /devices/virtual/input/input467 [ 237.772111] input: syz1 as /devices/virtual/input/input468 [ 237.778806] input: syz1 as /devices/virtual/input/input470 18:44:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:05 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:05 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) r3 = dup2(r0, r1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x5, 0x15, 0x4, 0x58f}, 'syz0\x00', 0xc}) [ 237.893586] input: syz1 as /devices/virtual/input/input472 [ 237.921468] input: syz1 as /devices/virtual/input/input473 18:44:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0xfffffffffffffffa, 0x6, 0x2, 0x7e3], 0x4, 0x81, 0xff, 0x40, 0xc0, 0x8e7, {0x6, 0x3, 0xe846, 0x4, 0x400, 0x81, 0x1, 0x40, 0x100, 0x100, 0x5, 0x8, 0x3, 0x9, "0fa2630249b8e80900d32febf0c15d4577667a6be65ac239d94f006dede24307"}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x4, 0x9, 0x1, 0xdd2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0xff}, &(0x7f0000000240)=0x8) [ 237.963492] input: syz1 as /devices/virtual/input/input474 [ 237.974716] input: syz1 as /devices/virtual/input/input475 [ 237.987629] input: syz1 as /devices/virtual/input/input476 [ 238.048447] input: syz1 as /devices/virtual/input/input477 [ 238.076616] input: syz1 as /devices/virtual/input/input478 18:44:05 executing program 2 (fault-call:3 fault-nth:5): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x62c6, 0xfff, 0x1, 0x670, 0x6, 0xffffffff, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8d}}, 0x6, 0x4, 0x6, 0x9, 0xfffffffffffffff7}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f00000001c0)=0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:05 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:05 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 238.188690] input: syz1 as /devices/virtual/input/input479 [ 238.223165] input: syz1 as /devices/virtual/input/input481 [ 238.223625] hid-generic 0000:0000:0000.0022: ignoring exceeding usage max 18:44:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x1, 0x389, 0x9, 0x0, 0x4, 0x9}) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x2000) r3 = dup2(r0, r2) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000140)={0x26, 0x3, 0x0, {0x5, 0x5, 0x0, 'syz1\x00'}}, 0x26) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) 18:44:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 238.241371] input: syz1 as /devices/virtual/input/input482 [ 238.254786] input: syz1 as /devices/virtual/input/input483 [ 238.274753] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on sz1 [ 238.335482] input: syz1 as /devices/virtual/input/input484 [ 238.361342] FAULT_INJECTION: forcing a failure. [ 238.361342] name failslab, interval 1, probability 0, space 0, times 0 [ 238.387640] CPU: 1 PID: 11821 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 238.394792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.394798] Call Trace: [ 238.394815] dump_stack+0x138/0x19c [ 238.394835] should_fail.cold+0x10f/0x159 [ 238.394853] should_failslab+0xdb/0x130 [ 238.394868] kmem_cache_alloc_node_trace+0x280/0x770 [ 238.394883] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 238.394898] __kmalloc_node_track_caller+0x3d/0x80 [ 238.394912] __kmalloc_reserve.isra.0+0x40/0xe0 [ 238.394923] __alloc_skb+0xcf/0x500 [ 238.394932] ? skb_scrub_packet+0x4b0/0x4b0 [ 238.394943] ? netlink_has_listeners+0x20a/0x330 [ 238.394955] kobject_uevent_env+0x781/0xc23 [ 238.394965] ? wait_for_completion+0x420/0x420 [ 238.394982] kobject_uevent+0x20/0x26 [ 238.394990] device_del+0x65c/0xaa0 [ 238.395002] ? __device_links_no_driver+0x220/0x220 [ 238.406954] ? refcount_dec_and_test+0x1b/0x20 [ 238.406968] device_destroy+0x89/0xc0 [ 238.406977] ? root_device_unregister+0x80/0x80 [ 238.406995] hidraw_disconnect+0xf9/0x2b0 [ 238.418692] hid_disconnect+0x10b/0x180 [ 238.418704] hid_device_remove+0x179/0x230 [ 238.418718] device_release_driver_internal+0x2a9/0x540 [ 238.418729] ? hid_hw_close+0xd0/0xd0 [ 238.429260] device_release_driver+0x1a/0x20 [ 238.429271] bus_remove_device+0x2f0/0x4b0 [ 238.429284] device_del+0x3ce/0xaa0 [ 238.429303] ? lock_downgrade+0x6e0/0x6e0 [ 238.438861] ? __device_links_no_driver+0x220/0x220 [ 238.438879] hid_destroy_device+0xe4/0x160 [ 238.438891] uhid_dev_destroy+0x9c/0x100 [ 238.438898] uhid_char_write+0xab9/0xf00 [ 238.438912] __vfs_write+0x105/0x6b0 [ 238.446816] ? uhid_hid_stop+0x90/0x90 [ 238.446829] ? kernel_read+0x120/0x120 [ 238.446840] ? __inode_security_revalidate+0xd6/0x130 [ 238.446853] ? avc_policy_seqno+0x9/0x20 [ 238.561445] ? selinux_file_permission+0x85/0x480 [ 238.566271] ? security_file_permission+0x89/0x1f0 [ 238.571192] ? rw_verify_area+0xea/0x2b0 [ 238.575240] vfs_write+0x198/0x500 [ 238.578762] SyS_write+0xfd/0x230 [ 238.582203] ? SyS_read+0x230/0x230 [ 238.585814] ? do_syscall_64+0x53/0x640 [ 238.589775] ? SyS_read+0x230/0x230 [ 238.593388] do_syscall_64+0x1e8/0x640 [ 238.597253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.602082] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 238.607269] RIP: 0033:0x459829 [ 238.610450] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.618135] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 238.625382] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x204000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 18:44:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 238.632630] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 238.639904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 238.647639] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 238.660300] input: syz1 as /devices/virtual/input/input486 [ 238.665929] input: syz1 as /devices/virtual/input/input485 18:44:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:44:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 238.791715] input: syz1 as /devices/virtual/input/input489 [ 238.803924] input: syz1 as /devices/virtual/input/input490 [ 238.819137] input: syz1 as /devices/virtual/input/input488 18:44:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000180)={0x3d, "f901787f330351e9171db41501bd53b457c872f1a8612f8acbf2d3f9446c488a2d20cabe4bae8baaa102c7d49bf8c559c6083a706bb6d966d99227c2f05a0b8af1c6ebed44dfe0b3b4f8fdbf7a2199377dbed2a02dfbb1021a5bf1a0ab6eae18dd519d35bca695b0843730dd814a04e5fce6c7c7e7ddaa808638f5365a9076b2"}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x264, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r2, 0x6}, 0x8) [ 238.869422] input: syz1 as /devices/virtual/input/input492 [ 238.898141] input: syz1 as /devices/virtual/input/input493 18:44:06 executing program 2 (fault-call:3 fault-nth:6): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:06 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 238.966614] input: syz1 as /devices/virtual/input/input496 [ 239.043558] input: syz1 as /devices/virtual/input/input497 [ 239.053453] input: syz1 as /devices/virtual/input/input498 [ 239.064951] hid-generic 0000:0000:0000.0023: ignoring exceeding usage max [ 239.075731] input: syz1 as /devices/virtual/input/input499 [ 239.104826] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on sz1 [ 239.124954] input: syz1 as /devices/virtual/input/input500 [ 239.142633] FAULT_INJECTION: forcing a failure. [ 239.142633] name failslab, interval 1, probability 0, space 0, times 0 [ 239.156795] CPU: 1 PID: 11903 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 239.163914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.173254] Call Trace: [ 239.175825] dump_stack+0x138/0x19c [ 239.179442] should_fail.cold+0x10f/0x159 [ 239.183584] should_failslab+0xdb/0x130 [ 239.187544] kmem_cache_alloc_node_trace+0x280/0x770 [ 239.192640] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 239.198079] __kmalloc_node_track_caller+0x3d/0x80 [ 239.202987] __kmalloc_reserve.isra.0+0x40/0xe0 [ 239.207635] __alloc_skb+0xcf/0x500 [ 239.211245] ? skb_scrub_packet+0x4b0/0x4b0 [ 239.211257] ? netlink_has_listeners+0x20a/0x330 [ 239.211272] kobject_uevent_env+0x781/0xc23 [ 239.211282] ? wait_for_completion+0x420/0x420 [ 239.211301] kobject_uevent+0x20/0x26 [ 239.220350] device_del+0x65c/0xaa0 [ 239.220365] ? __device_links_no_driver+0x220/0x220 [ 239.220376] ? refcount_dec_and_test+0x1b/0x20 [ 239.220388] device_destroy+0x89/0xc0 [ 239.220397] ? root_device_unregister+0x80/0x80 [ 239.220413] hidraw_disconnect+0xf9/0x2b0 [ 239.220423] hid_disconnect+0x10b/0x180 [ 239.220432] hid_device_remove+0x179/0x230 [ 239.220446] device_release_driver_internal+0x2a9/0x540 [ 239.220452] ? hid_hw_close+0xd0/0xd0 [ 239.220463] device_release_driver+0x1a/0x20 [ 239.229330] bus_remove_device+0x2f0/0x4b0 [ 239.236733] device_del+0x3ce/0xaa0 [ 239.236748] ? lock_downgrade+0x6e0/0x6e0 [ 239.236758] ? __device_links_no_driver+0x220/0x220 [ 239.236775] hid_destroy_device+0xe4/0x160 [ 239.236786] uhid_dev_destroy+0x9c/0x100 [ 239.236798] uhid_char_write+0xab9/0xf00 [ 239.309853] __vfs_write+0x105/0x6b0 [ 239.313548] ? uhid_hid_stop+0x90/0x90 [ 239.317415] ? kernel_read+0x120/0x120 [ 239.321280] ? __inode_security_revalidate+0xd6/0x130 [ 239.326463] ? avc_policy_seqno+0x9/0x20 [ 239.330508] ? selinux_file_permission+0x85/0x480 [ 239.335432] ? security_file_permission+0x89/0x1f0 [ 239.340338] ? rw_verify_area+0xea/0x2b0 [ 239.344387] vfs_write+0x198/0x500 [ 239.347917] SyS_write+0xfd/0x230 [ 239.351436] ? SyS_read+0x230/0x230 [ 239.355038] ? do_syscall_64+0x53/0x640 [ 239.358990] ? SyS_read+0x230/0x230 [ 239.362596] do_syscall_64+0x1e8/0x640 [ 239.366468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.371319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.376491] RIP: 0033:0x459829 [ 239.379656] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.387339] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 239.394588] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x0, 0x80000001) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x9, 0x800, 0x734, 0x9}, 0x14) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x6, {0x4, 0x7, 0x0, 0x401, 0x8, 0x8001}}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fdatasync(r0) 18:44:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$ax25(r2, &(0x7f00000003c0)={{0x3, @bcast}, [@null, @netrom, @bcast, @rose, @null, @bcast, @default]}, &(0x7f0000000440)=0x48) quotactl(0x4, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000480)="68e009ca48f521d57623b293597ffc7aaa9c274b2e8a7b0ec50f5d09d42d2b6f16c75f65fb1f857e32e2ef7fc578bfeefbff33e08ca7543ded1296be9edd4165729f6432038173150fa30bdc42899e6c2823538fcbf35313571408af670da2e53124a9488b62b249e6944e6dc2ce") ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000500)={0xfffffffffffffff8, 0x200, 0x9a2, 'queue0\x00'}) ioctl$KDMKTONE(r2, 0x4b30, 0x9) r4 = dup2(r0, r1) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="83a91e", 0x3, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000380)) [ 239.401840] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 239.409093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 239.416337] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 239.437457] input: syz1 as /devices/virtual/input/input501 18:44:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r1, r1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @rand_addr=0x5}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='vlan0\x00', 0x9, 0x100000001, 0x7}) 18:44:06 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 239.535283] input: syz1 as /devices/virtual/input/input503 [ 239.542894] input: syz1 as /devices/virtual/input/input504 [ 239.564324] Unknown ioctl -2138001791 [ 239.569159] Unknown ioctl -1064545484 18:44:06 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 239.585825] Unknown ioctl 19248 [ 239.600582] Unknown ioctl 8706 [ 239.622483] input: syz1 as /devices/virtual/input/input506 18:44:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e55}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffe7}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x340}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r3) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) [ 239.646459] Unknown ioctl -2138001791 [ 239.652453] Unknown ioctl -1064545484 [ 239.657166] Unknown ioctl 19248 [ 239.662243] Unknown ioctl 8706 [ 239.674055] input: syz1 as /devices/virtual/input/input507 18:44:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 239.707422] input: syz1 as /devices/virtual/input/input509 [ 239.729956] input: syz1 as /devices/virtual/input/input510 [ 239.746705] input: syz1 as /devices/virtual/input/input511 18:44:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:07 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:07 executing program 2 (fault-call:3 fault-nth:7): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:07 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x4000) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x8, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) ioctl$TCXONC(r0, 0x540a, 0x701) dup2(r1, r2) [ 239.842816] input: syz1 as /devices/virtual/input/input512 [ 239.877865] input: syz1 as /devices/virtual/input/input513 [ 239.889066] input: syz1 as /devices/virtual/input/input515 [ 239.895283] input: syz1 as /devices/virtual/input/input514 [ 239.914408] input: syz1 as /devices/virtual/input/input516 18:44:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x2200) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x6, 0x10001, 0x3}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x202700, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000100)=""/37, &(0x7f0000000140)=0x25) [ 239.945288] hid-generic 0000:0000:0000.0024: ignoring exceeding usage max [ 239.979537] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on sz1 [ 240.004677] FAULT_INJECTION: forcing a failure. [ 240.004677] name failslab, interval 1, probability 0, space 0, times 0 [ 240.026457] CPU: 0 PID: 11973 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 240.033587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.042935] Call Trace: [ 240.042954] dump_stack+0x138/0x19c [ 240.042974] should_fail.cold+0x10f/0x159 [ 240.042991] should_failslab+0xdb/0x130 [ 240.043002] kmem_cache_alloc_node_trace+0x280/0x770 [ 240.043018] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 240.043031] __kmalloc_node_track_caller+0x3d/0x80 [ 240.043044] __kmalloc_reserve.isra.0+0x40/0xe0 [ 240.043055] __alloc_skb+0xcf/0x500 [ 240.043064] ? skb_scrub_packet+0x4b0/0x4b0 [ 240.043077] ? netlink_has_listeners+0x20a/0x330 [ 240.043090] kobject_uevent_env+0x781/0xc23 [ 240.043100] ? wait_for_completion+0x420/0x420 [ 240.043118] kobject_uevent+0x20/0x26 [ 240.043127] device_del+0x65c/0xaa0 [ 240.043138] ? __device_links_no_driver+0x220/0x220 [ 240.043151] ? refcount_dec_and_test+0x1b/0x20 [ 240.049342] device_destroy+0x89/0xc0 [ 240.049354] ? root_device_unregister+0x80/0x80 [ 240.049373] hidraw_disconnect+0xf9/0x2b0 [ 240.049385] hid_disconnect+0x10b/0x180 [ 240.049397] hid_device_remove+0x179/0x230 [ 240.136632] device_release_driver_internal+0x2a9/0x540 [ 240.141991] ? hid_hw_close+0xd0/0xd0 [ 240.145777] device_release_driver+0x1a/0x20 [ 240.150172] bus_remove_device+0x2f0/0x4b0 [ 240.154396] device_del+0x3ce/0xaa0 [ 240.158010] ? lock_downgrade+0x6e0/0x6e0 [ 240.162133] ? __device_links_no_driver+0x220/0x220 [ 240.167128] hid_destroy_device+0xe4/0x160 [ 240.171343] uhid_dev_destroy+0x9c/0x100 [ 240.175379] uhid_char_write+0xab9/0xf00 [ 240.179422] __vfs_write+0x105/0x6b0 [ 240.183113] ? uhid_hid_stop+0x90/0x90 [ 240.186987] ? kernel_read+0x120/0x120 [ 240.190863] ? __inode_security_revalidate+0xd6/0x130 [ 240.196033] ? avc_policy_seqno+0x9/0x20 [ 240.200082] ? selinux_file_permission+0x85/0x480 [ 240.204923] ? security_file_permission+0x89/0x1f0 [ 240.209837] ? rw_verify_area+0xea/0x2b0 [ 240.213887] vfs_write+0x198/0x500 [ 240.217406] SyS_write+0xfd/0x230 [ 240.220842] ? SyS_read+0x230/0x230 [ 240.224444] ? do_syscall_64+0x53/0x640 [ 240.228394] ? SyS_read+0x230/0x230 [ 240.232009] do_syscall_64+0x1e8/0x640 [ 240.235878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.240702] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.245897] RIP: 0033:0x459829 [ 240.249078] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.256779] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 240.264034] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 240.271280] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 240.278532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 240.285790] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 240.296110] input: syz1 as /devices/virtual/input/input517 18:44:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = getpid() rt_sigqueueinfo(r1, 0x32, &(0x7f0000000000)={0x33, 0x8000, 0x4}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) [ 240.368792] input: syz1 as /devices/virtual/input/input518 [ 240.393998] input: syz1 as /devices/virtual/input/input519 18:44:07 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x881, 0x104) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000fc0)={0x120e, 0xb, 0x2, 0x1, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@generic="5d028e413b539bbf53f96f5a2adb3f0a6b495adebb091642e6fc5bfb651b7614d9396269448c75b21a30dc15e6af28ba1922135a4987c4bcf95c9844ba3a8a07dad8068aa2048614a8c09c7bf43a7e8ee664491e34505f1b5502c07cd96b5dc0de3ff99c46e1048775c06f28280933b09a9cf822eb63841124c166c69ce14396e35734985cca67c330c3573b647f6abab8c1e3f67941749b296a619e7b4de7a7e88c2dca9294cafeee", @generic="5829b0", @nested={0x1004, 0x54, [@generic="fb9355aad386306509165da39491276d6fd13e900c25417eca4937b7c1294d6b4e31bd7c518abdf3dc7f3081b82753ae097e7fe68c297d00cbf974942bed1b0f58a2bf7f7bac9e1eb8a3ce3ab1141d542d5ae9972f0351961c4a8e0dd3b709ad169e383340f1332b9a68c1d7d5d32972e9eebd09bd0f14e4c95b5b60f6ee36a886959c5a15c43da019e08b49f188ceef7748a762646a5917c32cd5ffb13baf1bfaafdf1a5ee485ccff6bf6e8f02ddb0ae06ba1fd9c5a38393894d0b83ada17a2262b6f729b0ff87e58ba2d4dbe7753575a1bcb40795774642f7fab66b33e57847c860731f4f66d415e80c398a4de75cc052daf657e03824f4031e2dcb814358f44180aecbc72dd9653b6683d9f4eb50a86a966be7bd2fb209c8901507de6db1768e506a95fac9815d299b110da4908bae26fa8ada80cc3941faa2a274ff0107cdc7ec5146c1c273e0c099b1544422adcc3d57a95adc55bc3dbb0c8b0484233515d01c0792828966aef52c2b375411e73a3ac13186fad95bd25c1907279d42d5fa99b6466acf75ee6d94f916f33b8a22143d3e830be650cd517f0ef61a8ba944898d44b36a4a0bdf4d61725445adb16ef2666f93af819ee9c0ee66751e45549511ebaa40466e1e6aeeb52c5acce208a3f5c404d82cce497bd3b5216c59179b1de5e35f3d2ca1b5cfb78d73f47e1a779d51262ea50502946cd5db48383147d49d38de36da801c5e486d7b6f25205e11e6940deb4020fa7d562a77878ce043c30f8a169019a56d89c62e4cd4d588be16546d220a7e9a0d8ee0db1fb0412af5696f062cafbd5783ba18d920d692e2ba81ac191f738eb8aa5611cfcd7c1604f2bd7257019804e1bde2a65d938545d4270afa2239c91cc9f69a761b3270a83dcc3ac6ca5612865a32ca1723d56434999cd8236dd2981f1902af82ae04ee4bc5d4fc8fbc3035264dd5c83c478e62aa176c50ec1a2816c7a3af536d93f6424f9fb63892d8e5f993a2c2c458804d0bd3d240dc7333fdcc461147ac5b00947b3bb9a04c811d5f89a63470a85b09ec69b074e5f6828270697583c243320274dd7f08291c37385f27c4935d5f64638539d74b1ef882a3e2fe00a023afe1d1ba76f2c2c1c834494af50501208252e1cd5c5364658938a136ca97af2cb3ccbe28f330097e365e1ccd9529be00d1a4c8e7494a8f025229c1e12307ad9fa8be2bf75ea214360375eda9be3f45d683cb4d2651560ae05355ecfd6d7fb2017ffc7eeda88d1431d8817882946f078377f79fa6437e5cce57e8fdc4e0fd17266c0c01c677e933aa94a5fb5a33eed0db76805337c6328ff872c8bd13d980029381f5e74419773e3a9166cc262fb94a3d15f262c01189a3b19d72cd9a17708e7c2ea6a4a95423712526c71cea443705972619f009ab6e6743d250ce4be2959c853df9da18e2843c2e2a800fd723d3cf8f91909374d9231cb9980e9d97e2d75622371042ca0a481c9fa41a7e5e33447ebe9e8ea6fe0543d4db65bdf84e2311d34a9c56080339b56aff836f2c0073e74964ec7b4a321d615a810b87844b62aa2c527da770111f8a8253af8b07f8bba313fbe816299b1c7ef0261ca783d8e9ef39c33cae32c4a33199ddffdd6c8d1702ed3bc7ae3943c3313b3a8635a382f13e6c967443075fe77e63b63d5e159d724870c13f453cd8696a93b556bdb56ed8ec8936ed465dcf4dcb353d6ad9ca4518bb4df549ef996c89ed9e4924b3a09532e9bfe4a32134d3785f45ee7867d8e02061b35883427c18ddfdb0495894a9a4f96d49a529d41ede45713363c39e90f372207b54b175783cc2f9e09d0a44a8269ed77322fd3586e5c478d9554c60e4973b859a1a7ac76d4eaddc98e912e8184a94548c1b099f131229cef4216c730d81f457928ba5a64271c3be9b617215ef9575f7a99c96eef027a1259a66c843e6bc0ff5f78bb6d12cb9e85a998ae6437df6095bd6c3edb9c0a09def30c85a55f278ddfb0fbc261e7b8f2817a72316a1043714b63f910885c73c83ccaf7188a30348acbf3f3e3b3d2a509a6680c5efff4f38a52fd8197f6b3c8b8a7d90a73b445773ae2ec30cf23a7caf2558ab889357d727c4daccbdf1b8cd41f99e1f76caad4634f44a7d27dc42c78851c52dadd7762cb9dd37882f549508f3f2019854ef43eedd83da48b0357d0bd500d569b62c80a26a8374b40d5aa8c981b3f1247203d66ad7efe90489155ff5a86f782a76c819fb0c07ca01b8b12f60b1721ef1bfb02fc26c7199ebb224f998ce809102c6822abee02780ecc0757fbf24f60fdcc5e181ed036945874b2d3a63d94acdef227565dbc99366283e9c099b370204fa4d955491a13a781a754284b7d5e462baa67652a4159ab135ac023e21a53483072a9232a1881e6e2b2c1c52c7e49dde5daaf91cee65e2c901ace5bb4e49db2cca2040e7f7fadbb91bb03fa8f658fa8aa3ad4ebf1d4152d7e1ffbb350f2fe0cf26ab560fd4ee3aa216945c3b0c907334d8a5bc7e20376360d0e17ae3a2bef6c57b5b0bed13aef24e08c774917d625e95c6ff02a4a2c7ca1d113606834c59903612d49fe6d5cb25c179fdecf415437f523a4935a46badb19fcdb7aa4a236df7b566a2de90fa1b6dcb1294fb3d484eaf22584a4469d4cbc9cb4f058643c7ee3fb3f4d655132e310092e5ae45fdbc721ed69cd70a99b88bdaec687470b410284224133b8369fd175f2d70a2f6095849039afe1d25bd9f35f5c68314046596e194d894172983e4a87d2d3ceb4254afe553dff4893071d8277fc7fab21b0c7a790a384525eedfd8fe6bea44c87e126536a474b7a063beedf156b27cf969f04984383b430e033127eb3c6284081e26b4273787e23d4c6a46f9a46a331f2a2367805d12a66158bfc6dce6a2af1c2ea5343d25778b6b5a4b25b8ceca678822b11cf7efef3cf2335a1850f68d2a0360733261a24bbea62c671e9a95e28f6bb6ba360ee19ed904f67be95fe83ec7aa0a71d2853325633e190b5ad752f5ea773a04213a504787479e333768a6028b74829218d8b3997a2167078da1a5c49030470f8f7073335890bd65619874ef758dd4765c8fa06c9aeb457e6604d160e631d266baca58055aae4cf81a10dfe178b80dad242772a7af1641e8740c3969fda25b0179a5f52095e61b2d75416d070327fc7ed5c536e95aba8bcaa96c549418e0c21949673baeb24d05056028696127cf8e11d63df6e2e1c950b756b2ac720e96364fdbf8ba4eb2747fede25567df964f61e208056ebacd9f7e4725a9a5f84f84c77cff0f69ef97cc4352460171ea8a9721290a1782939c7ba1409b7b28d88cd5386f931320d8e714b60155494cac76eb96b34ab933ba34857326a34cc0c920428dad20c94aae706f2b2cba5d155bbd6f08a7767fc0173689ec40faf175b7388207deebb90ec67e0a083cc2b3732fc27d245c42fec2bd8c8e351913233842972fd807e45445071f798c4f89d3cff405e16f1ab559fcb05faf0811b3d3dc1ef70efbd59b53db778e04396019849f1f0833a01773888c8207908fd3b9502dc58b83dc1ca727e94a14de2478d20899d5371eea1a524d0229bbe7faa44b65eefc853c2515036b168b0a0b5d355fd3efd95d50eae6352fd8aed7f2e65815622d5291a15bec5b123da3d0bc7f57359193fab0bd973ca3937411900b8b31439cb3fee3f4976abd3252c5919fbcc93bd7edbce0ab0bfc86caab1316337efcfaf9b37fcb910f0e43a7dbda1b9d4539f399ef6fe55ee7b1ea5640c619daaa40e589278cd3e010259f566f0d1969e40491e18eafcaa8f53a309df4cd7caa7126d75895f29b79276a6b349d9bb272fa1e790b620feca191aa8d1779a8452874d716dcc9ba6b3ff5905505a173f7edd24f8a59e65793799114ae4efd5598e50bb711cf493f5f5f332f87f6bbd522b505e16c3e4fa3435ffa289c479474256a5c8a7db36980170975a4e4ba526cd7f8d014c51b4757b492e9594c7612b5a14be3c141893ded7bb852548c2a506e94e3206b997269307a8e1021b1820b886e6c8728b39a25bcdb82d6d0a3df42266ea510fb59bd0debbe62166da8a425349ee247038bd849fc5326ead7f531196d879621515252c949cf3d831703a252a97999d47ae3a9823ee4accbe6b14445e8926d2ce0525773a21405091a3d21fa0b78baba8f8fcaca1b74f308885d6176ebe222abc66014051cde323c7213aeeec22135a9ad6b39c492427a4ec263c7c5fa0760553f243c38771973d76c10252cd80dd42edd40f0111ed99b488ccdbd156b6fa121ce6a84ef1bac73bb862e4aa4385367de2914a470d6c32b57de8ce15ea3fda1b9e66e4da77f6186242afed16aa20bd01a93e8a12a4e56b06874ad17fd90c9dabbfd55d09846112bcfc5ed08ac680f14c6d9cbc747e4b4569ac759aadc206682d559215d7f6ccbc59d292da608fe1e69495c5138b98327e38719d8bf3f3f3fec27a6e77ba1974d3e0d1007cdefe1507dee36c37fb55aeb2b29de2941563355f8e11a0c879442ec8be97f7a3555d5e42d9e708d06465796ab7fb65c8fe78b9b2583f6576d77bab680ff9f5308748d1f512f96c02393d0bded308019ff790a6f667fad375a99a9e13a2c2918b49ddfd4b1b13ab84bb91c67299976c28f223641e1e8b0cecfafdbb7ded5891ab28a8215d0c7f92700878a94d3ee16babbe666bb5d86472476a46d7854c5e4f5f68993cc6288d0c3280802af57167930a055528fee1f94fdcef8cdc7f7d516c3aa7d9685c591cdbcaf0fe795545b47cc98eddf2d150623180b6a9b44be7f371eee2ef18ac31d531c9add8676416a81d37012d0f6ee7e1e67a8906e16013cc39ffb74d08b13bd692025592d4f9f92993a583c84d470d977b92cb03fe90b5cdb6024d9b49fdd11a4b432347fc5c36c8d5ebc6bb48b0518e83d8af1f4c9ad19186a71b4867de2391fce9159cad1a158f4d07c660c2330b271f9996d630e40f444227c98f29433d16346c9998e56bd10ed6d5e9d203d01a203822bfddd116043d698bc8aaaf10c61688b98eb24dec06722fa91ae6cb4b197381d3c2d65bcd14601b5a98e079c64fae170f908e6d7c72739bcbbf0910421a1ad1cfbaf217686c336ae6d785336becb60950eedd259107492d3d915dd37a7940c52abbabc6b50ea799260d14136fb3e1ad788e22db6ac9d0c186d821ca344a97ba0b40a4f1c9a7c69633e121ea1118256bf91f6f72e7e85e9eb8d8c3ebb37110349c86b7a490f657fa1e6c03b999b5a953ef111748673c2a6863c45304775364302239f003562ec8a3357ba7a1dd4617a20e70e19e850c6f1c7a9b0f462a589208b70289708eeb150c2b05db67a017775f1bee4588e281f1d8578bfeefb854dedeadb1c761a302c9b12b334815dcb722f19c883848881269066803825d074f2b8c5f343a1a5de5fca2b7f2ebdcdd458575bb10ceb42ed516ff13ea3fd6e1c02324c1aa2fa1103e03fee4a8bc552b55c59f8d608065b1ffd85b5c093ca351f7f8a3034daa5b13e999f555e6b2bae0fa0cb1cda264f905967a53588c79c9ebd3252817bf65a827c918302a1f15e8f2c256ca3a8b6b9a62313ad09b890a20cc0a67025b85fbefef3954994692401f45d04ddb259a000cea45722188fb5ed409fce6290a99c663305aad184a53ddff354c842dddfba1541afe4c00a4628b1688be2d922c155241b152456ed3c7a3c08200eb945e49d78269b87fbb8ff353237537920a2b1fedd53db038f425f3d4fcc1d29f2102f4ad23976cd7b478e77cf8666b3afb"]}, @generic, @generic="991121b06a6180984b15a1fce25430ec33036917b41fe80565", @typed={0x4, 0x84}, @typed={0xc, 0x5d, @u64=0x5}]}, 0x10f0}, 0x1, 0x0, 0x0, 0x7993ea2f71ecd471}, 0x40000) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r0, r1) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="e9971b346971", 'team_slave_0\x00'}}) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2) [ 240.465298] input: syz1 as /devices/virtual/input/input521 [ 240.536106] input: syz1 as /devices/virtual/input/input524 [ 240.556879] input: syz1 as /devices/virtual/input/input525 18:44:07 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 240.582129] input: syz1 as /devices/virtual/input/input523 18:44:07 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r0, r1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) bind$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3ff, 0x80) [ 240.636562] input: syz1 as /devices/virtual/input/input526 [ 240.660758] input: syz1 as /devices/virtual/input/input527 18:44:07 executing program 2 (fault-call:3 fault-nth:8): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 240.692014] input: syz1 as /devices/virtual/input/input528 [ 240.701753] input: syz1 as /devices/virtual/input/input529 18:44:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r0, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x40, {0x200, 0x8, 0x7, 0x1, 0xbf, 0x40}}) 18:44:08 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 240.804415] hid-generic 0000:0000:0000.0025: ignoring exceeding usage max [ 240.829293] input: syz1 as /devices/virtual/input/input533 18:44:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x06\x00\x00\x00/\xff\a\x00\x00\x00\x00\x00\x00ent#\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='asymmetric\x00', r1) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) [ 240.889733] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on sz1 [ 240.921107] input: syz1 as /devices/virtual/input/input535 [ 240.963382] input: syz1 as /devices/virtual/input/input536 [ 240.974384] FAULT_INJECTION: forcing a failure. [ 240.974384] name failslab, interval 1, probability 0, space 0, times 0 [ 241.003181] CPU: 1 PID: 12043 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 241.010305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.010310] Call Trace: [ 241.010328] dump_stack+0x138/0x19c [ 241.010347] should_fail.cold+0x10f/0x159 [ 241.010363] should_failslab+0xdb/0x130 [ 241.010382] kmem_cache_alloc_node_trace+0x280/0x770 [ 241.010399] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 241.022328] __kmalloc_node_track_caller+0x3d/0x80 [ 241.022344] __kmalloc_reserve.isra.0+0x40/0xe0 [ 241.022356] __alloc_skb+0xcf/0x500 [ 241.022372] ? skb_scrub_packet+0x4b0/0x4b0 [ 241.030109] ? netlink_has_listeners+0x20a/0x330 [ 241.030125] kobject_uevent_env+0x781/0xc23 [ 241.030136] ? wait_for_completion+0x420/0x420 [ 241.030153] kobject_uevent+0x20/0x26 [ 241.030163] device_del+0x65c/0xaa0 [ 241.030177] ? __device_links_no_driver+0x220/0x220 [ 241.088153] ? refcount_dec_and_test+0x1b/0x20 [ 241.092719] device_destroy+0x89/0xc0 [ 241.096499] ? root_device_unregister+0x80/0x80 [ 241.101161] hidraw_disconnect+0xf9/0x2b0 [ 241.105295] hid_disconnect+0x10b/0x180 [ 241.109252] hid_device_remove+0x179/0x230 [ 241.113474] device_release_driver_internal+0x2a9/0x540 [ 241.118830] ? hid_hw_close+0xd0/0xd0 [ 241.122614] device_release_driver+0x1a/0x20 [ 241.127008] bus_remove_device+0x2f0/0x4b0 [ 241.131223] device_del+0x3ce/0xaa0 [ 241.134837] ? lock_downgrade+0x6e0/0x6e0 [ 241.138968] ? __device_links_no_driver+0x220/0x220 [ 241.143961] hid_destroy_device+0xe4/0x160 [ 241.148186] uhid_dev_destroy+0x9c/0x100 [ 241.152243] uhid_char_write+0xab9/0xf00 [ 241.156297] __vfs_write+0x105/0x6b0 [ 241.160007] ? uhid_hid_stop+0x90/0x90 [ 241.163880] ? kernel_read+0x120/0x120 [ 241.167746] ? __inode_security_revalidate+0xd6/0x130 [ 241.172923] ? avc_policy_seqno+0x9/0x20 [ 241.176963] ? selinux_file_permission+0x85/0x480 [ 241.181785] ? security_file_permission+0x89/0x1f0 [ 241.186692] ? rw_verify_area+0xea/0x2b0 [ 241.190734] vfs_write+0x198/0x500 [ 241.194252] SyS_write+0xfd/0x230 [ 241.197683] ? SyS_read+0x230/0x230 [ 241.201285] ? do_syscall_64+0x53/0x640 [ 241.205239] ? SyS_read+0x230/0x230 [ 241.208845] do_syscall_64+0x1e8/0x640 [ 241.212718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.217555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.222723] RIP: 0033:0x459829 [ 241.225900] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.233601] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 241.240858] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 241.248111] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 241.255368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 18:44:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 241.262632] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 241.278623] input: syz1 as /devices/virtual/input/input537 [ 241.285272] input: syz1 as /devices/virtual/input/input539 [ 241.303957] input: syz1 as /devices/virtual/input/input538 18:44:08 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', &(0x7f0000000180)=""/148, 0x94) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x800, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x80, r2}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000280)) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r3) [ 241.346788] input: syz1 as /devices/virtual/input/input540 [ 241.357791] input: syz1 as /devices/virtual/input/input541 [ 241.408979] input: syz1 as /devices/virtual/input/input542 18:44:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) [ 241.457046] input: syz1 as /devices/virtual/input/input543 18:44:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 241.503142] input: syz1 as /devices/virtual/input/input544 18:44:08 executing program 2 (fault-call:3 fault-nth:9): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 241.577769] input: syz1 as /devices/virtual/input/input545 18:44:08 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 241.646288] hid-generic 0000:0000:0000.0026: ignoring exceeding usage max [ 241.659167] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on sz1 [ 241.676120] input: syz1 as /devices/virtual/input/input547 [ 241.685697] input: syz1 as /devices/virtual/input/input548 [ 241.706761] FAULT_INJECTION: forcing a failure. [ 241.706761] name failslab, interval 1, probability 0, space 0, times 0 [ 241.721360] CPU: 0 PID: 12109 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 241.728482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.737835] Call Trace: [ 241.740426] dump_stack+0x138/0x19c [ 241.744070] should_fail.cold+0x10f/0x159 [ 241.748228] should_failslab+0xdb/0x130 [ 241.752205] kmem_cache_alloc_node+0x287/0x780 [ 241.756797] __alloc_skb+0x9c/0x500 [ 241.760433] ? skb_scrub_packet+0x4b0/0x4b0 [ 241.764753] ? netlink_has_listeners+0x20a/0x330 [ 241.769508] kobject_uevent_env+0x781/0xc23 [ 241.769521] ? wait_for_completion+0x420/0x420 [ 241.769540] kobject_uevent+0x20/0x26 [ 241.769550] device_del+0x65c/0xaa0 [ 241.769565] ? __device_links_no_driver+0x220/0x220 [ 241.778434] ? refcount_dec_and_test+0x1b/0x20 [ 241.778448] device_destroy+0x89/0xc0 [ 241.778457] ? root_device_unregister+0x80/0x80 [ 241.778473] hidraw_disconnect+0xf9/0x2b0 [ 241.778484] hid_disconnect+0x10b/0x180 [ 241.778497] hid_device_remove+0x179/0x230 [ 241.785884] device_release_driver_internal+0x2a9/0x540 [ 241.785893] ? hid_hw_close+0xd0/0xd0 [ 241.785906] device_release_driver+0x1a/0x20 [ 241.785915] bus_remove_device+0x2f0/0x4b0 [ 241.785929] device_del+0x3ce/0xaa0 [ 241.785944] ? lock_downgrade+0x6e0/0x6e0 [ 241.842124] ? __device_links_no_driver+0x220/0x220 [ 241.847133] hid_destroy_device+0xe4/0x160 [ 241.851357] uhid_dev_destroy+0x9c/0x100 [ 241.855402] uhid_char_write+0xab9/0xf00 [ 241.859455] __vfs_write+0x105/0x6b0 [ 241.863176] ? uhid_hid_stop+0x90/0x90 [ 241.867052] ? kernel_read+0x120/0x120 [ 241.870927] ? __inode_security_revalidate+0xd6/0x130 [ 241.876115] ? avc_policy_seqno+0x9/0x20 [ 241.880167] ? selinux_file_permission+0x85/0x480 [ 241.884997] ? security_file_permission+0x89/0x1f0 [ 241.889903] ? rw_verify_area+0xea/0x2b0 [ 241.893956] vfs_write+0x198/0x500 [ 241.897505] SyS_write+0xfd/0x230 [ 241.900944] ? SyS_read+0x230/0x230 [ 241.904565] ? do_syscall_64+0x53/0x640 [ 241.908534] ? SyS_read+0x230/0x230 [ 241.912154] do_syscall_64+0x1e8/0x640 [ 241.916029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.920861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.926038] RIP: 0033:0x459829 [ 241.929204] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.936888] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 241.944137] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x6) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 241.951390] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 241.958651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 241.965910] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 241.986321] input: syz1 as /devices/virtual/input/input549 18:44:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) fsync(r0) 18:44:09 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 242.075285] input: syz1 as /devices/virtual/input/input551 [ 242.108183] input: syz1 as /devices/virtual/input/input552 18:44:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) io_setup(0x80000000, &(0x7f0000000000)=0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="a4748420c3c4e5dc65db671dd59d32daf935f4415a72fddb3abe042432786050fe1e6bb4f996a89db3ee0a8a89788d6f0ebbf08623e2d06945dab038839755b97df30d869c24edb5accd03e7c6d7638442817e881f6a02f09b6665960f85d43cc78a6a88ef931f68a86af80bb88aab2f3ba347041bbc1b7580cb81c06152150f278eebc1643080cfb33166a7bac20776c203016f51be98b946f65803ebebd9911d07854c6dc3d6af6238", 0xaa, 0xffffffffffff0a91, 0x0, 0x1, r3}, &(0x7f00000001c0)) dup2(r0, r1) [ 242.134776] input: syz1 as /devices/virtual/input/input554 18:44:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fallocate(r0, 0x10, 0x100000000, 0x3f) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0x0]) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setgroups(0x5, &(0x7f0000000280)=[r2, r3, r4, r5, r6]) 18:44:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 242.193630] input: syz1 as /devices/virtual/input/input556 18:44:09 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) r5 = dup2(r0, r2) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000500)={0x15, 0xc3, &(0x7f0000000400)="36704f0d57dbebaa24c93d9e853362d0c10a89b0ac05d83fa4aa35af2886b9f6bd47bc6609319991549a6f9f488939770f7198aa412bfc843af642e0e8aee3af4a6f13da7f7d42595db17be16ecd16d99ce7d3679006d258686777dcd3a91bf76953553a98f038dedf9898040e3f5bc2bbad8c55cb34e93a6c783249db0278ac67f5dce60822555b8728be95a910dafcafa8a76e397e9545ab4fe903dba92e8dd825433b5c65dde4208d5be10cc75d9e66e974dd5d1de1a89302ff9e4ed470b6f3e27f"}) [ 242.307480] input: syz1 as /devices/virtual/input/input559 18:44:09 executing program 2 (fault-call:3 fault-nth:10): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r0, r1) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffeffffffff, @mcast2, 0xeb8}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="aa491eb9b190dcb95913d99458d665337f63cebb6d89e4a7371bacf1215da1ba1725fc7d1f1466aa5831ee23485504c5ecbda112efb9d00e5099c487c23bf902651b7bba5698f94b7f784bc99c463d522d45af46c7dd201d42c8023807bb4b5568037e657c61911ca8db6b7b1d2a0a330999519742e6e3812a4b341c", 0x7c}, {&(0x7f0000000180)="4a0b53c8ccd45ca6ca016eaf2827b6e452d06c10490fc36e9b18be4bc1ca72c7875730271c47c8f2244c57dc5cb784b47ba7e81f1cb28844f3319f905993656c8b37df7c4216f06cb01b21b91e9d97044a3248adf92e6f51c34f86a0b906fc6d4fc325b0fdaba0ea7804452747a56008ca800045c25a86d32f5a51ae2b52e7363b72373cfa1eccd0aaaf26b50a0fbfba7282a50aff1bdce47cef10d9e720bc5457f1f255", 0xa4}, {&(0x7f0000000240)="ee3ed32e9783ad2e5a564a3a2617c7678e284ea53f36f660627c85e41756b1dd30f5554d7a9c9b5282eb4e350500c56e26150fd5416c4f6130d46e61af215408ff29b20e017612a33ba4d2437d2d96192ad980175b719f83c760bfa2b822fb9ea363f87958e0df076c4ee0dd94e31d4587715817d4174b5ddac971a4d5c47fe212ceface65b318715a81b405ecd5be2734355968b58ea9df9d1a695cb4ef9ff0ddd7ec3fb889e3eef2c586236c46c70e7c9814aef1172f522c455782e0881d1e0a91e062f5ba102040c5b33968c1de3e7725093649c96b9b226ea150ea66", 0xde}], 0x3, &(0x7f0000000fc0)=[@rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0x3, 0x0, [@ipv4={[], [], @empty}, @mcast2, @mcast2, @mcast2, @loopback, @remote, @dev={0xfe, 0x80, [], 0xd}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts_2292={{0xc8, 0x29, 0x36, {0x67, 0x15, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x800000000, 0x3d, "cefd8ef57319ed5f19303969a74c65a20577ce2d356defb691a1278028e86a9a43b494af373d1c1daa38b037445f0023d4b35e52c9cfc19c41fcc4830b"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x12}}, @calipso={0x7, 0x48, {0x8, 0x10, 0x3, 0x5, [0x100000001, 0x100000000, 0x0, 0x80, 0x3, 0x76, 0x9, 0x8]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts_2292={{0x1030, 0x29, 0x36, {0x3b, 0x202, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic={0x10001, 0x1000, "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"}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, [], [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x11f0}, 0x4010) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x1, 0x0, 0x10000}) 18:44:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:09 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 242.405561] input: syz1 as /devices/virtual/input/input560 18:44:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xc, 0x7fff, {0x57, 0x7fffffff, 0x8, {0xfff}, {0x800, 0x4e}, @ramp={0x0, 0xe1b3, {0x200, 0x3ff, 0x6d, 0x1}}}, {0x57, 0x8, 0x616c, {0x8, 0x5}, {0x3, 0x10001}, @const={0x2, {0x4, 0x10001, 0x3, 0x9}}}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 242.478603] input: syz1 as /devices/virtual/input/input562 [ 242.501293] hid-generic 0000:0000:0000.0027: ignoring exceeding usage max [ 242.511237] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 242.547339] input: syz1 as /devices/virtual/input/input564 [ 242.579365] FAULT_INJECTION: forcing a failure. [ 242.579365] name failslab, interval 1, probability 0, space 0, times 0 18:44:09 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 242.605760] CPU: 0 PID: 12197 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 242.612885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.612890] Call Trace: [ 242.612905] dump_stack+0x138/0x19c [ 242.612925] should_fail.cold+0x10f/0x159 [ 242.612941] should_failslab+0xdb/0x130 [ 242.612951] kmem_cache_alloc_node+0x287/0x780 [ 242.612968] __alloc_skb+0x9c/0x500 [ 242.612977] ? skb_scrub_packet+0x4b0/0x4b0 [ 242.612988] ? netlink_has_listeners+0x20a/0x330 [ 242.613000] kobject_uevent_env+0x781/0xc23 [ 242.613008] ? wait_for_completion+0x420/0x420 [ 242.613023] kobject_uevent+0x20/0x26 [ 242.659655] device_del+0x65c/0xaa0 [ 242.659670] ? __device_links_no_driver+0x220/0x220 [ 242.659682] ? refcount_dec_and_test+0x1b/0x20 [ 242.659694] device_destroy+0x89/0xc0 [ 242.659706] ? root_device_unregister+0x80/0x80 [ 242.668064] hidraw_disconnect+0xf9/0x2b0 [ 242.668077] hid_disconnect+0x10b/0x180 [ 242.668088] hid_device_remove+0x179/0x230 [ 242.668103] device_release_driver_internal+0x2a9/0x540 [ 242.668113] ? hid_hw_close+0xd0/0xd0 [ 242.676720] device_release_driver+0x1a/0x20 [ 242.676730] bus_remove_device+0x2f0/0x4b0 [ 242.676743] device_del+0x3ce/0xaa0 [ 242.676757] ? lock_downgrade+0x6e0/0x6e0 [ 242.676765] ? __device_links_no_driver+0x220/0x220 [ 242.676783] hid_destroy_device+0xe4/0x160 [ 242.685136] uhid_dev_destroy+0x9c/0x100 [ 242.685148] uhid_char_write+0xab9/0xf00 [ 242.685163] __vfs_write+0x105/0x6b0 [ 242.685173] ? uhid_hid_stop+0x90/0x90 [ 242.685181] ? kernel_read+0x120/0x120 [ 242.685195] ? __inode_security_revalidate+0xd6/0x130 [ 242.761574] ? avc_policy_seqno+0x9/0x20 [ 242.765616] ? selinux_file_permission+0x85/0x480 [ 242.770440] ? security_file_permission+0x89/0x1f0 [ 242.775356] ? rw_verify_area+0xea/0x2b0 [ 242.779397] vfs_write+0x198/0x500 [ 242.782915] SyS_write+0xfd/0x230 [ 242.786354] ? SyS_read+0x230/0x230 [ 242.789963] ? do_syscall_64+0x53/0x640 [ 242.793913] ? SyS_read+0x230/0x230 [ 242.797519] do_syscall_64+0x1e8/0x640 [ 242.801381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.806205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.811796] RIP: 0033:0x459829 [ 242.814963] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.822648] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 242.829899] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 242.837150] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 242.844396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 242.851644] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 242.875118] input: syz1 as /devices/virtual/input/input566 18:44:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80402, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000009a80)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000008180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000098c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009900)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000009a00)=0xe8) fstat(r0, &(0x7f000000a0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009ac0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009b00)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000009c00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009c40)={0x0, 0x0, 0x0}, &(0x7f0000009c80)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009cc0)=0x0) fstat(r0, &(0x7f0000009d00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009d80)={0x0, 0x0, 0x0}, &(0x7f0000009dc0)=0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000009e00)=0x0) getresuid(&(0x7f0000009e40)=0x0, &(0x7f0000009e80), &(0x7f0000009ec0)) getgroups(0x3, &(0x7f0000009f00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) sendmsg$netlink(r1, &(0x7f000000a080)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000009800)=[{&(0x7f0000000fc0)={0x148c, 0x18, 0x104, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x4b, @u32=0x2}, @generic="1b4f9bdcdb19387abe2fa73054e027edc61dc9157caf8fd93c9f85fce7fdc9bafc6eb502ad070e02abfeba49d752cd497d1598a937db06816bd94c8ee42e56ff3b5fb7ee619f7cfc097d348edbcd9f675a0944d366263bedeaf37bd9be36c255b954dfb602d6245bfc6220a91c61a688a3c310d0e7b015cdeb6dbb4a205f6412ad48ff3b7fe76b1d6b24705d2cd69ee6", @generic="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", @generic="b4776dc8c36e95188c653913dfc13b558a24a0e21e9274b28501c9d17000b55598a2e3ade438e2a1718be0cd665066a4bfe86bc7e1f7896177f16b0521a6c107cc1e5341a0181e8e19560f3f3588fabc1f501e2895e9290b8b18e227a222d7aef25a767de3eb780e7c3a16bc18124b97e6f13e77b6da9b2c5e2baca848f0a9a74ca18298d9b43be6dd273c61473b75ae1fc3337fcf2115c2329397f69e54d2add8d78aa0dc7e736c97ec0edb18ccd67fa1dbb3b5b18e8aa483b4fae4d096289f3541e29f9d01de43260db9371f8bd1989b75c76abb465a87e91c84caa3133a74c9e3a6dd21d1a8", @typed={0xc, 0x4c, @u64=0xe06d}, @generic="c7cca076ac5a2bda84706d292f753d0e972d7566f9b2d61516e9c5cceccaa76732d97a39ca8028f14bdbd00885f08b43388b262955940b9b780809e19b024b8eec875609137675a7988094cd6545ac9750d017ceefc0424b05be5e0c3d8eec452cae25308cf79d6dc5a0c14bbe822cef4f6446b20e2aa99c630531f785deac0e430146d8b0a6a7ccc66ea379eba32387ef3587a629c5fbf0f3c646b1d9ae77f3392ab3", @nested={0x1084, 0x60, [@typed={0x8, 0x1f, @uid}, @typed={0xc, 0x84, @u64=0x8}, @generic="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", @generic="215d762bb550d07a6738164e6546103e3a1ae4ee430a2bbb05885900492246bbef351ee4542b6506fee023bdca7ad24256d4a6c6080a8ce0ba55fce236ad30ca2b9a6fa6a4558adfe29a81904190c46ffefdddbd9c93ce79ebf67ae18c304887ec311463fabaa32af0d1d514"]}, @generic="ff26e288e622f7237db25d75262ebe72cbdb00f5a959541ba84fb0d9805c9bc8ace3bbeb2c2d63d128ad8b05522657dd7e7faa73b58a85a4eb61f3b61ef58aea405881e50ea6374f0117edec76d44d8a0ba1182eb5124f7165fcc093176aadc200ac5e5e4fd72424aa17f4886ca4208b78b808e59bdc1ca0d9405399ba3d5abd0093f919bc56e385547d3330408c462b603b54cb80483397499f0e478e420c3eae14f98141c6241f4773979adba70ac63e6db19f0140d5f04ad73ca74b", @typed={0x8, 0x7a, @pid=r2}, @typed={0x8, 0x6b, @ipv4=@broadcast}]}, 0x148c}, {&(0x7f0000002480)={0x1614, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="816bcac7bc9df579172b62fdae014fd146adaba5e881ccf756077ac67c9f7059891c6e74753fdca6887f8f1bb611864dc736e6e7471dcd43e2b5df8cc2a5efe91ea933d853485d0b9ace0f2579129078f4e03d96434c5eecf87ae0ddb2bd2a92a21dd9d51972fe44606457aca17652e7dc2460e819b735daf2a18f7e25c85cd5343dc168f960d593001f39127d438367604061fa9e0c9f0cf1c51f3b9700c10de30992f76875ad9cc604d2cff580a3ff97fe4e577c9308692156e9dd77e42f888cbcbbeb016fa620232c99", @typed={0x8, 0x17, @pid=r3}, @typed={0x8, 0x55, @uid=r4}, @nested={0x6c, 0x61, [@typed={0x4, 0x89}, @generic="0fe1da7c2ad06c32cbca8d1082acd3135e6b56c803ace1738e10287ee73e5672be5e1106a736f56c3cc0ca9e3fa0da4b4c2cd419fa98ab07de08c6aa56461bab017e48ad05ad9b6acbabda7c603f79716e9488b34f69e4668d7246fa966a2ee6d3", @generic="5b651b"]}, @generic="dc4ba0f572f4eebab87354f0272c6739c02895fc7220061f0560a7d35462275b949fe7780a49498ba5ddfede373a8656ca4b3af68d841a98fc6e3caeeeae84b8561c03098ddb52d9544334f141371601ac115728f266b8f97b0d878ed8b7f530dd4663b9778cbbff483a7328e59ceb24e50a9f1d55375082b53b87ccf55e02015ff673612f91597fea204485a2427d8baf6d6884cbb8e7d72403a3b56855b76150df824bf6296350b6cac6010d147e83e8e4ef80b8e1e1660e8dec2f65bf6b11661d412034b706c5d0889e992e62af46c4", @nested={0xc, 0x46, [@typed={0x8, 0x41, @uid=r5}]}, @typed={0x8, 0x87, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @nested={0x13c8, 0x87, [@generic="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", @generic="167b90ce56d4f25998c426100e7c6724a843ac0b44e3f83bf17cd2f546bdbe766354ad2f6b6ec47e82471075bcbd5d1baee9c808842ea379ea232c1c4ef21a1f887c4b75a266b776ed8c3c6177419775ed7db6a4755e4d79988869af53e7963afa1e15579ac13008d60fa31146549d05ece1d494fbd4f4fe6781dc146a200c65e9b05dc09072d8045b04dcd1230d389f47a664d9ef5e1c319fbfb686", @typed={0x8, 0x4, @uid=r6}, @typed={0xe0, 0x65, @binary="26c3bac23bc6403f8587263fa542baad1079b156302bbb88f9896bad42e10cb94fa7eb2b3dafa6ce401ca618c4f9e0693b0f7deda43ffd0e6e6f8bf46f631c26ca279f5cec0c6a932a1379304b560a80d27d4ad9edb0fd6a3dbabbf4b1735aa4d4d732ab6f47ae8c95ebf8748ce69e857967099f0f4487487258d18ba3eaee621253ddd24e857ebb4dc4cc16206fdf731a0375d61bb79d41f80df7d6bd061ded944cc31f6ff0a37fcce25b0a03245dd3a0c1ffe047046070d66bae5a63d93fdbcebac9049b7cc8519de7f0cd2586f4fab1f91fa25b24c7b7aa"}, @typed={0x8, 0x26, @ipv4=@loopback}, @generic="5b872e5274ff0f4136e5b68d01d84d2606d18347da2aab0aded7245a7520f8115310d612a713e7839ebaa4a205a838ee0c80f21f47d9d54af8d282b8b71755b167bce1e2183f9d4f2702159d7cbd0acb1f700b03301a0349011e1f217a6a735d69043785bca510bf446b829b1398c6d708e5a4a32d1dbd0a6b9721959ae7668c09857031c289b78433de223a5ffb3313354b9b53da15e2662d9387c1e0c99642ef56998f6286cbea187c06b29941adb9d01cfc1fe546432975aa917bb3e13153b4bc89dc4daaaf5fb5b2ba5dd29cd7144bc378", @generic="fc604e4f73b6469e067bc4c5839b1ac92758c222de3086c1f898773b66f074fcc900df1ddd156d9575444f34f6ceddffb22eb1e6e6a1f84b491bc1d83ed2c8d24c88d9bf4f66e1e86f872024e6dbe29c5ab3e1ee7b36a1c9bdfefe35e46a0e7c08e6eb2097b80d25b49dd8bdddb3afb9b1daa5fcae54dbc44ff5f90e21bbd1775bcfefe7b89b08a6cca75e187663f4a04c6f724c8d4686365af34f8c6e7456ccb4eae5072645d6d9d9065d900be34870d86b1be54977c6c5a2ee8692f11d74a49670d4dbc94e770fa1025451f1b317d3f54ba13c11746520c6a4b15fe18effc6a3f2b53f1b629ea5ab41e4e496", @typed={0x8, 0x7c, @fd=r0}, @generic="787d8dc10454338de466cc1a4a64aa36bbed7a858c81dab65813c58b254eed1d970e3f04b78a6a1600b07e0b40b4e63c077d10e4db3c1ae293b4312532b73d5c2bcc8ce31d9fc2feaa0511e8eec9e8a43348d6ed2f20299abf2fade549e05e8cd3413ebcdb36829bb780d11e920f"]}, @typed={0x8, 0x80, @str='\x00'}, @typed={0x8, 0x64, @u32=0x8001}]}, 0x1614}, {&(0x7f0000000440)={0x178, 0x3a, 0x300, 0x70bd27, 0x25dfdbfd, "", [@nested={0xa8, 0x8d, [@generic="8aaa2bed0fc8e5864fb053bc1ebad03d9e9d018e1c770aab68740a5c12f4be72e978450b82dac1725f5522ce1a1df769c05d8cdfd87d2fa9e9e49d330f85e75e37da2efb657db4268887c34b2947bb5b1c888f53cff0e82201a03a074546383256c84461002d7faf468996025cecb915627739dc5ccd15a487acf9950befd00670c899f22cc511d0e25cedc3540d50e6ac5d47956279e773c63879763c43d3517d5b7da2"]}, @typed={0xc, 0x26, @u64=0x1}, @generic="600da6e127ed0a66149e5960cb3d42cab6094a02d69aad5994502075faaece89763ca03e00d67660952ff16a8677044f9d5a83bbfa286807699150040c55a3e4ddedf75fbc41ece8548d18c2cd48cb257d45e3e890ad9390243b733b43b750a2aca0a36303600d6df85fcdecf278c6de117118cc234581b8e1e3a52b8581ecd82a38d9e9c34ac21b898f43f607e4c23acbcdbb185e3a6ae7f96bef847cb108d46cda45326bd034239462a0a5944e55f5be777a13"]}, 0x178}, {&(0x7f0000003ac0)={0x2264, 0x25, 0x400, 0x70bd25, 0x25dfdbfd, "", [@nested={0x10c8, 0x92, [@typed={0x8, 0x64, @uid=r7}, @typed={0x54, 0x16, @binary="a870484e0d59c2542834c9b01791f4024e2b3df067f2c2f07eb459114a49827e9c46527fe77f8996af32b4292bd30140b498cb0b8db994ff582e9c709860f31985feb703d0159827932c1034ba"}, @typed={0x8, 0x1, @ipv4=@multicast1}, @generic="28d0439e665e34192b099a20410593bc20b37557e93d0ef5d29bdab0c78b787c454ba5f8fa5f898f987862de26394996881ae6fad7b9aba31a393a50ea6e46d026eaf96e6309e8cff25a2ee678ba3a9ef699af6ac0d0baf22af58528eeeef3d2003ea6236acd0069dfef1e7c27d35b28048c42afc22ec474e126c3c8bb86ef114e53b3b6b5d7d2aa68582348bb451f5cdbea50ceccbc5294327c2a5af270cf7425cc6b6b969b5c210cf7264c0b80b3c2cd297b4528c56cfdeefade516a457b698bab028d735f09a7d5d7368572e192f6ef7cf203760e944e7ea23f423b8dda7d5c90fbbf8e4de9b47ad14582c9fc6851d6891a12815e2ea5e6928a39a2631697307e16026e9bfa6a1da1b8ac6112677736f40e85691c677f1b02a3487ad655b4311b6244e06079af34d27151105dbb6ae7ccc2a94897b90d4a93a1cae58fcb9a9b957089deb5a6a203d67a27383efb5e93f332c493e14fcbb88307c2779cf6aeda3951000c6d705d562d559395e74ec1bef3b66c017c3e183603349f3409b60154890e2e88ed679e5ea57086e345163308553875f181a48ec3c6928d30b5b10ee0589b58a3389797c79e4d5e7d86d37019b91ac0615412d7352b0c06e9c19ac7be716acf482a473e9ee89b484912d3719062875c3075de7d2cea83f5bd7085a218c2e331a1e4b889b58e6b695654961d597457a6338e573fa0bf987ffd5973c987bab2b2ffcf069eee359fe4fcf68c4a61e195a7f671ea25a70e09aa6f52901bd0483f5708e7b8aed29be923d1108588695a4736452014127b3f5f2be610b5e9075864229d611db8c54e64b7620d22f8aacf4fac76a3f11f6da4d278f05614242fd6929823c8fb7bd552a449c70b5816624f903a3e1b6342f931de1d1e0e63930d64ebb0cb8b0bd79198e15ad97e9f3f1c3a83e5e7339081d798f55bf429163c1d01c49c7fda5097e8f2ad0b486a53a7a890c25c285d2bc18c4dc63c4d7159d4aec0dc858d61bef2c653a834d945ea9e5300212cfe0c9f296461b056cf392421c544193c34022047d550333f3bddcc618c6891b0eef379ea06dfe85dda26c8bbeac4e0ee4190b06336c70ba300b11c41f302ffdb776cccf498cd870a29776017f5636e0907ff18bffdde937b8c02498098c34bb6669c36375112dd25b0ab8ee2196419d6832ed48fe3c0c128284e618c73216be680cb07044a5088061b79a55376c1d2be47700d0fc12651348b57ce4b193e5bfbb58b48167d789b1e1f1dc08a32c493709ab7ca97156a83ef7ada794b5fd00e34488598566a3363c7eaa5183bd58dc3629b8dd6935852bf2e99f088a92f50c6577ecfa6091af0b425a83e192de0f991cfca99bb82efe2e05c239b3318c7652cde02cb79f4f5fbf3dc3d90473e28612fa91a65abfeced5e7949ce56c2c77feb90abed990e30e68de63f4ecebadb928c034e8858b4188533e66e4ad96e175058541425468e58f43cdf5659a79dbb25dd24706beaa6bdc3315d11cfce9f17a7dc09e7ee57c44a981d451ec12a461427cf4ec9a1e25ecc6bc7b347946c9e757700b4d64db6e744f7b40bf829b17e94625d36ab5866af63aea3484fda8c306340b69c92f3296b51dcad1c1861c739e93589664e36e391ab1679b6c2fa5a529e579fad991afca45d7749669ff30c380a3c4f2ab95653d5ea4ceeac5d40d9dc30b243939058dad44382acbaf85ae15b880c2e8e91f794a7b5bbf3a7c3001557b7d7133cfea2edcb4b3cdffff6a872f407cb216f8690ea30b8dd756cd5addd06478ac4717ddaae68296c331dcbeb3218a2e3b9a39e50f7079d5bb7326ce4793943d7c85e9921447188e4f908bd83d8145a1528a12a201462e393778a73b4f39ccdcd38ad053a6e80fcd8c8ae50a401daf3593baf5a19f2d5295ddc00f2eb87331c9d32ce3e014092ccbae19555a4102b3ac375e4ddd143fa53c5a1f40719fdd0aeb45014bd7827b03c3c1f45dfc5ebfb96aa21570c847f19393b1465dc3d09c0b62de0efc0119a58a2c8f8c4c18bd88bf8efe4f7d08663fae06989dbeb761bc37a20eaa73779d6988ae2cd5063f7a601485dde281aa139c6f6a8a5e560753f92ef6dcbd9d746790c8f4f6dd5a99f08b873f10e2ce87b5c5f11f36bc79d9e4d28f108ae75e7d02640e3ef09f40737318a5f13b0ee3a5b33e3fd556f1cbcc475d51daf59218088b188b6a8ae01b64e774748dce4b50834d9636fa6eabb3270b5648aace318dde1cf63c2a2d14b537828d622e0b7da436ffa4b6e4b52127ca776d94adef9e78ce32823bba7440b4fb1a652d5a8a0815696b55927f0a15fd02f12378b83179a1a145facee8095085dbea7a8f68be8c070a81ed5737d9921159e54f3a362a419356458c9b15680232706831de8857cba91b27056b47a8c40592e1a5df2f994cb35976db8e294658205ace4a025d75795ffae293a372e2b0d3ae0280941feea611b340c8ba393c4be5727af28c878c40a00bae82422f8f630d003f1a70003aea737e51fb9d66b5a0bcaa9c64755303367cc4ba6008dc29b6744e113724ca2a75137053f87669a1057779e1ffdd13c3dfb2915306744aa506111cb962f2e6c19e367e5f024a03f96d163a564cd2fbc0c69a9b8227831480fb6f9308e6050e76235a4e1d823b791691dfdaec029cd0482883873fab58f72e9a0efc8faea3aae0749a2ab083e3e21096ee3b8337c5ca43441ca3e874330660b08bd414b75763f28fe0adf290bbe4c1be9d51779584cdf020e23283982178d57730eae49afbb2b43aabbe2553d11a60fd1f47949551178ee62ac8981b17e84986c9bf37d936485ec050e275e557656640ac316ebbeb37345f6f58a4d45c6b7f9a0eb50e85546b958942bab139aed1bbdb7ccb88fea86f50b8f2d9bdff01350373571d66d30684fd77ae192d430e35b22ff5eeae25bc02acab1f260dc26301c8f70cca7310f6b9d161541a221bfa6b28ff9f02a841a202c89025ec44512281c07346fa0ce55c5de21f449dff906673b3c16ee3acadd8411d59c80e8d5c57916be15e26373edc926261310e9fcb16e2d84afff571043c71f630f7e8c0e77d528dc3bdf991cce294fbd0223899259f611b16e80e6277e563e096c5df51a8757005e98915bf0c43746b69ef14b5bf5395b98a734b5012f585bbcaa41713b8d3db305e00116b0c4e8290308770c266042038ce61b43ac641f4d465cad2d0cd1c30f877999281a8f21678c8b5b5e440e9c46eb20a77e7ed0eab373fa569bf1d805696c16e5e70672e41bb031169b44b29478e24cd266769307cfd5d7290add1b5f1e686ddf86f4345aba9be5f60efc8fc9f4cae6a87bd009783fa726d029c644a8ace35ffdf1c1841dced3c0f77e7e1b7d7217c1de35f823860945fe3fffd086d8f29270f7f1ad07702b731ca1b0604c6f897e35a40261552a07115f284151316bbe8e966b95863eafd102caf57eb0beb77c0a4fe134664c7a35a966ca4601d391f5c8aa9f0f468855b863ae5e2618c228b01e5c376175cdc8c9ceff12ec00db68130c78602f9f3bcd5fa55f4559af79ae3711e99844830d792c6acd370e5f66d65d1c4a3766b912a3483b512bc628bb1deef95c911280675e3365bfb394e06b9be3c9e9dee11e2a0c3e6e2fdcabc9138e154b50903f3c17ebc28e5cca984cc3473cd57e404009db18f3d4e40e77604371c3192b84cb35a7a7a0a181704344c337c395b64790d126b2d0c3c2c1e3c4b3606664a0188dec5889195df16cc77e817bb4b789a84b7660636d7427911420c3d1fbf1f16bea5d7d224aed758d8dd69058ff0a4adcd501ccf2401c62f14a0107e3fbb88ec0ffafb66b38e3618f3a80d8cabeb069f0bf9a3c2aac29e336c35c690ede0cb6d569dccaaa3b54e48733fb91d8d6d600cfbb5f4ee3fedcefd90fad7ef8ecb30bdf7063565b206f23eb53c184a27a72f182b502ac5d363e9e46c958457897cb9d205ed51f50acb48956464d8fcb7c779aa891d6c7ae14c2570b0f8a19c7249afeaed0006685b8d8af911828f6d684055c6740f42440fecaf568e1089ec6d412f0c1ecb429286f4072010b592342f94cb2539f4a570f342c0cefc441d11a12e43d24b661bbea26db2a6ec3cbca2ccc8d5a971f00c074495a648cb18a12fa5e0199f01ede8e3049449d326e3f7fe23a69d178501ea837be30d3747a0d909523e5a2b6bcde89fca966ec8cc79eb9a4d75ba6809283cd753ef9daeffd560e5ad2809eaff8d32035609a69d3174a256ba15f04a882615cf61d47f694f7705b2b570c7a0321108946054e05213a41092d87732e9165bf13375dfb6492ac0278f0acca5425e9018cd2069cf8e458acfa3b31326a9c66e73ac7b44b12bf6f08664fd9c8bf0c2e6f9f817d03d5431beae23cc3acfb1e3e1bcdc62b182df94091d73df86dad90fa5e7d40bbbc0203b847eefbd31e5a577b0f576153b06c4839c677124c45ddc4e3f6a89a64f3ef91d03fddc4d40cb32e42e07dea4856b7c627e749ef682d1d89c336fc92f2a6150cd974c14fdfdc41d9f9f9f772052d431492a1a1430b65ee9cbdf7c648e94fb116b93d35542ada2d3387d3915ac07c38d0417aff10198764346ceb0cd6d32056925e8ec1b3026c28da1659469da9982b7e03eb2c116d92baeef5ff93a7d382c5747b97c95a2591e95f04ee02c952683f5f32323504d606441e411c1a4c1acf8a9f2374dd37a116bb03c0152c290bf9d3bc30c1abd847e817c4793181661c98d246ab00e14d15ea987a5b6d539e5e5cece4e08ad3ceefcf7c7b819466fe254f0381cac54451a0e9f052a396aba37f5a02db6bfdc076b7703eb92c8a500425ed06b295b981e389d6fe7fababa4cd5ccc0eef2be9f7025fc2ab932ea96626c2f7e7dfff2ebdcde4c4846e8df777eb6df80f0605783b9562c09e3e9e131256b2872e5e6dc5f4aa8fbdc98de714f70a74e63f75589a575848680ee3a533bdc825eadb0c9c1b97bbad641e73352d5f463147bd082c61891fb49c5c47b8a4898fd246ca89bd73dd668b3f1b0b0dae3751d8a6f74f721c2ced3fc848a63d9eeaac304ef506edebd71c508c86d6920e914935f5af77e521dfbfb83fc6a3e6e04a8cc365ccfb06663d5d275c909a35d6279eae133dc9b7062c38599fedb98ae4b358dc538e2735f9b86b421e60d22aa4dbc4e989e1af9443b5e11bf51fd9543078a240784e5b786628f1a9120ca5905752144f38ac75bb0c095bbc48e32cdf4b2d11d1320f2aca0e16caaf5ae0e9aefc6f914ef0f13861c66cb63b82557ebcfb3833976ffbb75de4641ea3bd18093df57476172ecf5814e4d840e06d82ad848faf6bfe54880fa5366f2b64fb8641c4132e061eddb0f2e3d5fb0fd8baede1aa21c051ec5644867cedb158ec06764631b0169ead255b6d3b5ec6d8dc69cbc8f2d3e7109199cdb08cb76057c76d0bd079dee9ab28691f4671dd0be093b4b0f3b1aee564799c97fe06b6e4d21be119ed0d3d7df424eee3d0e622879affd24b9699d97e0b217387a951805041da42fef2a79dae05c11ba2b0596b0e8e61862ca1fe44e0f68464290524617b6707d708effe8059749c24247f2d243e70e9c0e685d711bd7ebd217f4776ac592f4644b33e8a32d98b7ebe26ffa5addd069a1bd6728e05ea94e04272cbfdb6180d902be5091568aea78daa3b67a51e5b2b9ee26644939df99a631dd1651196c86227eedd2e59294d0c280d43a3e9ac48ceee108eb4eb3a49e10e06ada02191a3efc46d196bd9220d2e49eb6c49feb88314298a3514695406d", @typed={0x4, 0x2e}, @typed={0x48, 0x73, @binary="fa8cfd640a11437971f85f365ab621998a954b237f62110e516ac26a4b46f8fc6a97e7828d28196bd504aef789154b39902ca0add4934c12b56b228b309b58e7d8"}, @typed={0x14, 0x31, @ipv6=@mcast2}]}, @typed={0xc, 0x3f, @str='syz1\x00'}, @typed={0x4, 0x65}, @generic="cea692f3ae55a7165cd8a5b1c5c0eb06b81eaeb365da2e4b2cf240e4e234d9ba5defce55cf95e092f14fafe011759cad41ec1f2070fb3a73402b00549398e0aff1fcc05a3cdde10044dab8806abf5b248d30f939c612af284ab0b0bbc69763b1e3e37281db20066e819cefa2db15acb88d20f3f1f768e47ef6229ebd6670165a48e4592ba3e62d736d131937309ddda1df7d52398ae0b70e9a409536c327d65dcb08ed0b46cb9ff74a4461814b4324da5fd36f659816d19716432a3e227e162c17ce0bd219210d8b2aff4ce6a82a8255a85a", @generic="01b8c656c95d3d02d1bd1cce07fd93fb125d644fd25f362fb7b2d6247641c846d98211b13dbfc1e6d95f407c37421e2c50bd63d24c0ab882d4e3d320bce3a0", @nested={0x1068, 0x4d, [@typed={0x4, 0x36}, @typed={0x8, 0x64, @uid=r8}, @generic="f4847c716788b1aaf0b0b9ff3c99302a713444b22d80c4f09c524215f2869646f6a52571a38ba4a38d96e4995ff3301a9dc5536cdbb9f06f103e0417833abefabdb54cb2cd59e8be81b4722f13f05b8f35eb9ad47c8998e66194786270103783d3bd93a352f766da8d88127ac958f798dd9f432ca60a578dd85230b034f0e234bbcaae717eb254cedee8dae7d04350fbcbcd93abbda2534f23cd50927be89713b26097f7fe3f952030b5448a1d9fb77e89dff963403c0de961b3dc707aa829ab355bd0f7eadf64175dd4bc21d3f52ac902e682881729bb544b55d933d2edaae8821846f8ec8f66fbf8c255245b61130cc0a821359db343e1ed1eedaa83815afa822d412496f4f56f77302004d7bd43f2c732455ee0a99cec17d85fb603cd6bffd10427f307d49721c8420408d6dd8c4f64a5598a4bd2d6d096cd7ac6cd38ae8d0a6b1a2202bc4be2bfbf1e158d20e700e6dcd6bcae07cc29e9810805c8f49f4d8cf546d7b15e89dcc01914e221cb34c5b3ccf65ab50220b18a3e44d9122c0adb7c4f201f4dad78d92ac8f50bc5e1a87054afbca6da63304af17ca54058e79d98df25f83791eb15c1633d048130588a7791049922d7b64d2f61c6ec08b2f3fc828777eb3f2edf34572ec23528b49e83897ea4c0680dbb777a5a8712df9fe92242980db89caa24b4e554973b815d54435242e7e385f9a456bcc555ff57f6197ee114be3b1d48fb1892b34d551d6236577f70c3f687fe1805a6ad36f207dd36fdbf2a095171af9e0d6e382291e28ae7a08cbcb4a47dc9d62caba259515365777baa40feea25f52a1dc62b7738d783e26e7aa5253f07a28183f636d98ee3751125db84634d3d455fb1bdd9a381459ff91e1182d0a77358764e262f032f0768b8112a6ad93d9ae65aa6ad476ed7a3cc4247a7a0cfbcfbd83e1d88182ee0784683db6525a16289ffc322b1ff63acb930b476d3847afa75c02ad17655dc9f759168dc5e3425a8ec1a3e90dbb87340b560aa8cd921caa4914a866d0daa5f73691896d33f532d163f1b618a5562346ee322efe5ed102cb9763efe74d8b3a429b76af468f6b3d9dee2c58fc587720ae01df7ad9708c10d217c5955e479468fbecfc58be18ddb41bae067622f637b6a57c5fd080000a6ac92689a6bf358c3125563cf35cf23a402ad900d2fd2246df87eacb578833c53623487d9380b0be51922bb59dddcf0a7e649d5fb97f1fb2757dd65a0b904ec0ec9c22ee7e14cc896395984120af8f015a9c4af48ef981668330b05e4f50876d0c463896cbd2b3c7bc135a5db7bcf5213bbf2bfb82320dc4837446e992d83c242fb5d1090ccec0c33086974add00102c8cb51acd34a07928f6abec141c52d902a2b7f5eef3aef1a19fc4d52e26a85092941e9f13ec26097d6a06b384ac10628ee10d3f0a34cac7bd20875c7cbc088c41308644a6153bfd815b8255910f56cf9fb4dfcb69813bf264d5e139210f3301e7fad4d505b8ead133c7bb8726d491460329caac89cdedd8aea8d49f7af1f4a980d5f483c8d4f5147efff94b2b81387120a8788a73563ec98796d5075c6335a97fa8f7f7c82f1cbbf593a3684f1b05d4db39d6e47ee013e9e311a5fbb9c9e792ef6603b72ccf45085ea271be46cb397b4a4ba278d86759a3a70b986707c609f4975bae958b48a8456b4b399b88849f5757752c294413b1a56b5d61aba80be0907258f39a370428ac6afb44d086ecce283d36f3fa92221713695be71267a53f0986968c666b895e83789f1a01994291226d8e53dc2305c4a78c6b719b1bc26272bc95099d3b4c5feacdf7ec2a67b41930c3e0d7e247533c915b4b52eb7c1ec53a01ea33a16f529ee779a8d13733c9dcd51e9243e97d7c89b5872afe5d1094088688d48dcc52926343fbf59716be6940d5ac5c6d6863a012804eb19b6fea720093bece9694d37faea5ea2598a47225e3b1ca51b0bd9d2676b124e1709fc10d33e388e6e7dd5aa1e64b90889df5cc39c9e1fdb88c8d6ddc04c1497408beb193cd63bb7524b34bc59990733ee663ce9009cf2aba942c391c0966970d66ff295653a9d5cc028bd2c323641ae933cba7384ab18d1e7be2184bc0a20ff0839601366bcf72d971f8898bb38d969a0c4561b82cac05cccf13223e3d163f8be967b95647c26e2cba5f5e6503892af0a25b2df3fe8692727602aa0a0d131b448f370767d435bd890b9526f7cc5597f72776f7cef7c7ecc9e012950e5430774e7e0f5dec2a6f693d3167d5a376072f8dee82f920f68777861397f12d6a2064835213c2b6f592063291137dafada3ebd1172c7f4131a0588e89f0260f62138bcb6ec9b3a527dbbc9f36c6667807aa78d078a7646243370d5393619b487a94f4752808f7b0e35ac7f23c556252e073c142bf244fea14ee0c33ffa8098a8f1137483632d6f449897822b26c4b45c7fefa3a75b61a2f3b2ee3bcb0816bf6ad1685c0d4ed859ecb3a2780c598b15d541f5481beca613aa1b61b25524a5fd32f6a893f01141b7bbcb407b4524a5bda73a851791761ec58adaf379a460e63100a7ee69c9c4a571e8470ef961cad06c2a6681e60251613d590116cb1739dc74e0b25a18f199f1c36d87e5e79204b9bf381ccdf91401751ff1e87fdcd19646d9a4af2629118fa456ba3b32c71234ed45108281850adb9c7ebf7b972ee24e866ba40f8ef3ebc834b447b438a8c3fe952b4f6dbcc5d02a283808a466df088b432f03d8ed5773d893b7ce8cc1b9b1ff6040e9c769a9b8bd67248969fa7255aa00584d33f355cb2a9a6508dc3ac92d8d317b8306946cffca868baa603eb28d04f92c206ece07aca36b34e12c415cb8a1b3352323daf23c691275f70c8f2a41e2374b62e9d936d40605e2eae6d2b4fd89e0ff963a2997fa2dfa4153ae77e9bd08b5655310aa5c86830c84002837b4a2628c1868425581a684382a1c0119f5b8824f8d774b6689206265c8f9502fadeaa0d197acba1cfbdc47b5748d2de3b2d9c5289d909c148c8f9096d99b18ca4a81c67c9612375e314ec36ee43e246359283cd58d174237ca787a521ac11a5427e734be0331fd8f016b5b452330c680d7aaec4e7a6f57e2a3a6c508eadffe373af585e57a8f75d0cb3fa26ba220460523f2311136e2f0109ecaf5e9d67daacd24848d84fa328bf105c8921ead7f0d6523692fee279dbbc34a599a05d9086529311ef46c79a6c8fcd59123e9906751017a93d2553bde726b2c72cbe521aaa38bb3f0970865539efd04291805a731cba912af7e2289f0a9afacfb279c3edaeb30a31081bd12e543b452b7e7260036ee6302bdb822f7ead19e62d07fdd24debf79264f439724ce6d948276c6760fe35b0384d1909d048e544e0d0c1dfe7040cda829d77f82cfd716b3a602ae5621b48f916faa68f87c3e00a128f6f334572c4d1dc424f9a9fff49828391bdab7ab1bd7e66b61c4a89fb68b16809a5c1eb2ab16ad13db64ac87963d50f7a51be4fad35edb08d03c5f8a29b69ee15be3f925de520d1758e07621b963751a796773a85215d8b0730bf8290ac07fdccefc466662b8b62821ff5b3d955981937482d30d7e6f4531bd62237051941f6fad24dbb81d290bb379f3133f02471c24eadaf06e8ba516e15df0f0569946f3c92fc37e0e836c94d7a0e0faa58f8516ae7682b3469f189dbea809adde81b34a60f5231b082c784b1ca370ee451bc4c3dacce3f4d4316de9bb09868ff90ea8a368897ca860f6b610000eb290343fb7ec493a075f521fb7b766328de5d6e08272392a0f32564aec4334d2378060bf938247ac2e1e51584543d6467386204b5b21499c80a2b1fc4a85d10b335c5559d386f3c84fd1ace08ec886d803013c23abc9e0873cf580139da95dcf4dd372c287e7eda5cac8374941ac36542d6e8d64f02eee95cb8135c3a63dc0e5310f292799c1ea381320772de38f60157079ca9478fd27597d6db30cb6aa3ab7a2dcb3e621605f1218c7fbfe224cfde48b2af52f13e5e619d4b06e1859ca9a6ee2eb22e28a4bbb5b4d71fd1be88ffe068e08976053cf70487c5bbcacc84abcb2148254a67d88db84dfb3835a2ef3deeff9abccb886f135a6b1059f78bd20da5311ece3980caccc818e23d92ba0c9bf7f303b80deee64e771d746393d505ac8e7f09fca1994d42a21510f6944adef00edf42f6b315df653c68a53fc10d26b921ade98558edfdd980f1290860dffcf5762a938eaaaa8e19311c7c0117a89b79f055bd3d953d652cc8fde5ea90fa50d54c5c8c9117263b0dee1da22f4856706d02ffe2d62258d2a49c84d779d0daa129f848ed0c5b53d1a5c4757c6cb8ddaf66bc4c1f71007e56fa3423e784011e7bf7b77172c05698503bc430b3ea64e0c3aa4de5aace359a42e5f4d8d7d0383f1093da6670bf5e3616719b8a1b4d3b6d211b0fe61cc9df1e1e644f21c89da2bf1fa071ed585d4e9c6ed36005f97d0ad65e16cd10238ae14d4aadb0f972090458e9e7eca436785298bd5db90ff9da745c07769a079d5cb06f59cdb69251de552db0e02d195ce207d63f5ca4d3d593ce18fca9271db3a4b2ff438c237bb5f846afa8e7419a9d8a7fd31486615b772873c1e00dd0af2dd77a296f21c9a711ae0c931efea2cea31b35cc5107cdbc234a89652d9df8c462888a4f5ab5c0cff2b7b3ac83d4d44b61f78be47d6c6ca6bff73e8927b1ed2e0e32a983c31e2ac1804a7595661ce6fc5fd1bbbd0c5f7df38be8bdebb448ec84a89ee8d5172a8860b4387e7fb428fd14ce710d38792c32bcfc240a9c1b1ee6eb591328fa54ca02dd818e1b645322621772c6116ee093fc25fcf9590d62cb1a9fb896bf64a26004fc85b96f3f963c5f7fcf867c1f9bbc4afc00539ea0f290d61b66549107547312901fdb990d4bf7ef8a811361ed665e557c5e1caae9c98c11754ea759e053f7aa901c1b36ad46eb98c1ca7f2d1202adf743c5ad7428ad5e186068c71b4aafec9f538919e2706dd800e4573bb65067d63f3e0aa573024fad7daccb54a4831ef32cdeb2b79558553c6d3bbb15ae69b4871e65ffb3c4da55b572bdd0cad579bdfe5d85bf10c73b7eaddc70aca8dd37ad042a96d2a7e3011f6672a429f50f20d9c54d53de2ce30eb0f0a56925cfc523d2f5383a800c8eeedcc728dfeaf0d9dfdd15b11a26cd0ebbc60357c3e7b4770a90194f7f4a3a6bbadb1f7e71987334685914b7e3a9fe17d4f51a3c8d601f2f0f906690b8d6eaaa22e9e4120a4df520cef5808522cc3892af34dcf756dab49ab788fffd2ddd5b38ba185bddfc5460217051a5701e09f0dbba8a4b7979d29d43b8c3c40d941d26e194c4140bbc5cbbbc77cfc3a7695cda065e0099f24ed8cb6fc89868ec992e0d65e9e6f7df9e31179b102e1e78811c5fd333f26cc6da9ed32ae3efb3d6f27270d081f18c4a10d06e04f1f5d802d45e46637db1a7401048409df9f02f59d4be22e2b7494f4d0a5816c23c5966ab3c34df3b01ffc23525bf6fb16028a781609e578210aca9c507f1b01f1fd9a3c52af233a912b3b1028ac776d5474c49bc61016546366da33165f691484a18baeacfb9bfdfc1d7c20bce53443040c7c71833cc67d9cc2de1aee52c58e4463a28d754f1555a5e4bd708d07b5b3d99eb383d8146d6d4adce2bc85079f3aeef718bdd7ebbe8cf9bdc7a7340c265cf02045ddb7d1762fe3e75a4eb320081f1e628c8b0834d7c5687c12393cb42d8db58240abfb7bceb7b08eee6a568a379c2c44baaf90c74b70ab1d1c68260a192f4f16e738ac6adb739acc00", @generic="1e8c38eeb8a53e30db92e277d9a4e14900d8017afed2bc871d26f00cbda07a8e7538b4de69f72e2ee9093508f4a23a4361e773a129894b5e1b7e17aaf6d6ef07a63f2c0635586442823bfd74d09e5801da019c3a6f819b"]}]}, 0x2264}, {&(0x7f0000005d40)={0x1210, 0x36, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@generic="e4351bd77acb0ff384a6635c362750a16151ae660af768accc34ac4a4e17cc74b625367618034371564b6f3c1553b1abfac42644e45829ab115ffb004f10e4f08b0fb17b927a39aab4afc0bc3f6de1826cc31856", @nested={0x34, 0x3d, [@typed={0x8, 0x87, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @typed={0xc, 0x8f, @u64=0xffffffff00000001}, @typed={0x8, 0x3, @u32=0x4}, @typed={0x4, 0x48}, @typed={0x8, 0x53, @u32=0x4}, @typed={0x8, 0x38, @uid=r9}]}, @generic="0e0548a8a586ed864bbc12e95488b29a105c4fbd3e76647fdd3a557d2844a47f8c508b5b153971ab5ee22921f9ba9cc780b4234dfb60846b723e396f0b29f6e8d9e748fda0421447bf4e110124bf98f969ca2aeb0b16d7025a574c29db19785b94de2b0133491db4c74b3f1467b009d45ab0a92f7e827ff8e6aa69c77547c0d43c9947bf04de28bf64", @generic="6f9f380b4c798f98b5cb7194f5ff44795df3f000ded44fb65d4f7975e943575cbbb241e72dcc845eb2764b3a93cee0d8309263a7452c4fd58eb9e36c773cc2d92d791b794cf37394d9d8100853c8fe527a4725b98f7b5a7e768c37b7e4694abca50036c6bed60770f15ef349973aba4a95a9aff03542d810f664026bc5a371b67deafdfad57eb065c40dacf8a07b0c29d18c351c7684f61cbe7d97bb9d69724336cd82d55b1f330235ba1abbac37e3a31fcb7724e4a6a5300a9bdb12e1abf218d8025725d1e31c51f1437c58a9a7c1b22aae0af615e7e2d5e2e206dea89a84535f337ebaddd0dba0d2d1a11e8ec9e77a84e84b58c0cc9095b2e570b452b5b39e21123e79f2c6a59503a61c09aca0a32896a5ba0f861788821d5c2fceca1c50e5daafa2560ad63dfc8392fcc3c3010fcb13e1e9b7ff3110f6b5fde5874fe77f8bd2f5b8a88c9d56fbe7edb4e4bb8720b3653d2a960cc72c1e498898cc48c0a980be3e5f7c6c84fb900999b1ebcade8270883d19ada538ca0d2e233c0e4fd1b7c8d628816ff52feed66f5a3c043fa7b82df90b786474ab90e241c13b1806d1b07697b9a681930da135a05558e1e8f882e772c7b493744ffe57b9ca24c7c0748ce0589433014c66ad9fddec2ae257546d2d850c8c652a198bc1d7dfcac814bb90153bdc491b5264a5214b4661e319fe17ac9703b30a0b692cf1d9437d0000b8ebe13520b0cc0de4198bf63751e3f28c25bec717fa18603ac345d718eedb57bda2c8e72f9e23dab0039399f45e892517462bff520a373436d87145a046c30f0316777b1cb64368a9618f7835f6cc32b9aef5d293caf541d45d5bd90fad19f98f3a90529e48770f9b5fe2eabb1c8dcc8d3a0774af3e3d51bb3a58e0830e9b2e213a3e23ca25477a2a967d84795ed0dd2fa9e75b3acfc69b44047c9052c6b3410281e5a61584c457e8406aba51ca8ee004242bbdbc7335fdee8b17c2d80d3d4b33b427e7a88e726a7bc0efb5ad13bb027abf2189088568432477a304e057f086c80aeb18820661e4db7f50cf84d86a4320e461a271f9bf9f4981639ee302ff4d8b414d7a1ad90e293e6c61abf4ff2a37e35c0aadac449472b2142427d249338fe5a5fdc11f3cccfb7d8bb589547097831970cd76f125b30bbd85e5759fd30724aa6aa55f7d0de80810d7aa42e6bfd58df67d9a60c774760ff93e1375e9e94981e557cf07110cbcbbe66a6001f61959ba9db7d1350caecf8f981e7d3e1989e7a91d7215b6170549148eb8beeadc46d19c3eed4e200c8224788a204c7b6a01adb75dba7cdc13e25c64f23fec6a4537823b62b5e723d1ab918c840789f3521e134f8a84e26a1c38e0b9f87e95b074c4d81bcea33d65005634ab3589ee13f2bb628cb943954a0a777a9731fbe6fe40e497983ff504f690e77b0d75bdc1120a9dde3cf4977c1b48f28ccc417f21b9f7c4eaf7cf73b3152fad4d5d2795262bcfbcbf9ec3c4b49fe0ae90fb2052f11052b5a087fd132a0a4e8467e6873e6395531d8553132eabaac00c7818b0ded12bd782ec053b5701a8128819513501b1eec0e6bf8e78d8b3ba1093815b2985354bc6cddcd6a6a41ee701296df67f2c4279f0d171175c659f00d430887f922cb7719da3affeef497267c04f3a80ec00fd5f319f55d4b3b6696ad650eacdd91a99817136336666528d0fa6082430c14d19fc175e311175f207856c49bb2cec66f14410e0eaa08a91f992a95a899cf4515e18bf0ff3fa560dc7078a48d05e41b20d6871c2989236a19ecf19d113be9cae8b39c4f4269919259c197b553e634de07712dc987ee2602054388f7ef07b585841fac634101dacf75b5ca4a217c81d174bd33f8bbe3a5de54ebc2449f2b573c457d168423c6892e82bad10b0694266d70de86dbe61a63875d11ca37facc299137cb42dd6cf784789d21b8120b157be96aca5edea1ea3ea83865fffa506346f4dac0794f95cc27ba4653d24ce25eb8234b696e987548a8729dc9026873b460577a25645a4c7596994a8f075a9574b589642e41e062d4c524d1630df4d60e30ced8f836abab819bd36599f1c63c30b9a224f0f157118cfc9472814333bd8534a69a50bcdf78a08139f471098f36e1854b33b3a5f90ac31e7a42dd389afc05b7f8e2d78691f7af64db27eb2b2763505fe8918d071472f884e01486ec50ce1c26bd6d3ca30efe80867438a71717038e9f9ee09b5be9e50dec1e95c5cb3d84d4d520c2a3d8ea218787ef32f59339ee124b05ac297b6ffda7b5e96dfbc948bbddfff27ea17854cfa563db4911a0f2f4ced41bbcc747918ce9fecfb9f01c9cf7dd9ede4c27c61ac89e2689f23660e8fa12687615dffbc34815ad5a5aeb4c28bb4ac2ae5c909b46edb68b933d39c9d9ea0eb24d7a379d932a903b16b3dba788efa8c4c098403cade95a525050826c461a889684138565047905fbddc1d5bc98a594238dc9b40e1868874356847fc45bcba6a7f01db42af7df6795185070860d3735b1851126cdab5655fe8500f0324747c9a75180f9eae9d86e048dbc125bad6a7f6531885302fa358a57b5687b4b78039cd295d1be3ab1b8f739960d534ccfb0c2d3a5806c8c5b198a7eb88f1e7a483378fff60749c0027344e191cc2492b465d7ed23b94878bdd99f4a1fbb05b11d2ef0abf7739c6b0032e5b7692ed219900aaa54683b593a98a357a97475743a3e1989bf038b7010820e6e7c7b75b47af004515ebde33c541f89d13420152bf642cce1a8437ce37c7151413de8a50771c496139ffa18bd050a8aaf08d8386bfda2ae6b823f9ae71eee9827f29ab6507ccca9618d61548cd4fad090c04221a4229ee75dc77ee7384c83611109e11f96d848102c0e2215821e676d65f0ef9767cb1b71ecbf15b3631730802b8adfe81ef5184578988049b7a5966b64417a17ade887ee14218a3279ba1477222eca36bbaf08fd38337cf68e9da3523a312e1716e273b1460e17693665971e3804b185c7b9664dfb61d2cd8debb7a1d810197cf74bf604c5b07eb0c06cebb65e8f5ea697567f3955be192426ab6990c959e01035e91d2e9a4934f397432f968f664f4a30a1cf02eeaa71b7646a3209864daf7118fe69124f56fad76eac51b74fba922bde64b210cce426e4f5383c26b52c770a55fa76937a3f5cc1505e91f4896eb2c84508e5703d39de575101e77cbeb1e4c1173976df11d7a34140501d107deb1b3d7dccede9b9fc241f828f3a39fca4372ae960c256c2797859a3153907a88ca4bb3ee0bac446ad4765f001009ad27beb5254550fa0ec0cac15aebc1eac5732035fd4368e2c11a1fb4e3092229bca78a33a0b177abfa538512111766d0ae752819e9d1419a962db2f4e26e1bbed0cbd05b1c80ef13ff54ce2ccb877c415b665cc3bc894b6757a0738c1b3ba92760e03e7c9f21f6a0c0beb8fd75ed85450da5f67435cf5a9e0024fd9a18fe26caa0547f56db478e54802e4b1cb7766ed76fb1819d403cd6440ff731043502c75e1015f65a7dceb93a2ccb467b350057b21de2e4b4923f5f510f7d26aa5fbf8f1e99dfde436f283127f3f40c54e77d30055e92a27a94c173dc82dcfcadfa56fe9fe44adf04723b099cf91fd79079c03e08b67d5593e9cbdf6e5e6cc92356ebdafe80070b510b8e19f165686383e74dea9288d7d223bdf110e613e4d6138eaa99caf6c9963a772731debe39089338ab3f33395bb984a125327a6bdc74dd34f88e3d30bc6e9f969b895f668789e82556761d777dca524a6e05479c87596aa625ed32857207d6a144082da970439b27bc831b494d84aa378fb0ca24f88e20e65022a9e81f8768e25c0a6fffe19a9100716f094bec6ddbd171ac6d0a9d5a23fa73f18c5970495012009d239f16e23d0a04bd2d46060060d0e4c14f950e5e88e5eb9a6348bce3e713241149f6a3cd5f1f91b8f815fed3814e8c1960119a0f839b8b9ec96a3889b40a7a5298d1f28a7398bf72729b8e6c9deabd5d156b3b8e27e4fc82a95a7eeefaf3903417115338df293f0a22946c338fa19ae61cc5024dd99406c4b57da723e497545f02048d19ea19907ba1a9a87d6d174505cc7d807a00bb2c4edffd7dcd671aae4a9fa103610f0e878809c5fb08228ea247cdc93bfde8e9365f24443533ef989a6813076748b4566810b3a6a6a7051a0a26ca47c82426a54ae63fc3d480255baf3aab1daa0b9f384c21d11e1139713923f7a09cb2d57dff1b3040d51c478a5bc184acc2d9c926aa76b54cf2b53405da5d67f5c313a3fd79b32b1e0d85839f81c685820d4e0bd4756b30a7093e3018b76ec2116df43de55d455c594d9455afc9dde0998e5db6c7f909630d7aebd6caf0e0be618f03f7c0755f1d828892e8e96ba4f889e1b1b7c3283baea08c3e33803953e2439437fe989eb95da40273afa3b7d3c1d910d2573556c50b23482021b7a60b30e2df013b1340172f60eb89acefa921e2ffec5510f3c0f934055d5211b732fa1ca90b6a27b7fae8850910d04c14b0a794ad352dbfe535d3c9e8fb1759f0e0a8817cf8dd7bd65eef33067d3de11e2c4be8e503505b5dd2e47d209b7c58224a8d29a68791873f98c78a528e8cb0cf0cc3825e28259bfbd47639a7bda06e91f8610821331b43704c98a93bbefa8cd54ae38b106506afcbbafccf756b9230bb2e3291aa7b9b6ff124981419c790a61375c2ddc2f307853e56cd4fa746ba6f2620764aeb36e980b13aeb95bc7ec43ce8cb8e035e78714101c4338c648889f2b9ce2df38e973f399caec39ef65c6f2647a44b9cd9e661971e2957b173a3d6f4fe2fd033d3742055f2c0f58e755cd2d42b32f9a402d46a74d3d2b38acaee582697ad06364d3a7a7cf5f043a38e844b4d044767112dfd434950f6040b1a754460eeae96c45aaf830753ebfa89478f1ffcf14440aa850911c89567da90dcaffaaaf964321866657e50168920c47a9d68e373d0942ccba9e8a095c621d04f4d97af3e7254904c9a260d8532339a7eddf18f062c617410897ccf99d95c4b4fe165ffa6e071add2d88a2d5415a03c924aecb78b6a69ddae54863ba73e4669322b0001e0376c637a74c985845a870d25c38d44cbe7a5220dc4000f2b28ef378772b2c917453283c6721b6fbab5f0519aea0b28748054b001dca313af08df6aa8358d88deb5675d0acd2447f46386b1ff07f885bedb106ac1302be74ffb23020961329cc50cf05b3305cb2aea32f035135cd741913ba59017fef23da4309fe42fcdb7cc86572aaba665fcdbe80954a90d8d25e718c2706fd42c07b95d18f71dd167b1d6a3fc75228a87442409ac963b7c655be9541a463105bb76721110bd2621cdaf20166dec3e3835d0a09b7e4c2ae1209aab5fe60601c67a590c4359fb1c969537e170aeaddd6cee04532e890c63c98cc3842bf2c856b12234e8ff3992c0d80ea20e0219930f6540dcc6d46fc898f7bfdcd00ea3baca8c9f10c559fb932fcbc5321f3d2cf0c6562808715cc4d12bf581fe8814fad043e9cd22e629b78566bd2d1ac657a711fe2b9d4b9438471cf83238dca1fda19329501252639ec1b32df7b9771ea63426fba0abb1dc213a91e081cd9d1a67540f4fd3a547cdef1dbf55be9c4f9110bf2f332757388feb67cf96419ef4ff70d2f4039207fc1a053fbbc74ce4822317e9f543e3f581fa7a53a66c79a33cdd089da077f7f4fb18f7bc37612ad48bf2975a50946c7f376b6255b34caa6c1ab3687d7f1a3b7c7f2196a08966a02581885af6aa60b14a81adf83de242acb5922826b0", @typed={0xec, 0x9, @binary="12c337bce85d0b2fbc2f734b7220fd0d5e41f216df97465fb94ee1728df54018e58e6e1b4363340764b2ad95f78d96110cbc54384b9fa0014fd3f8a24ab810210c5a80a56885a8a31c74fa76fbc9f417b0a9e4a531c084c053b2d9f3d37eb14f24333abdd86a040d9e1a97d7bd25cfd9f185fe43064b5733c0a0bbdd05117118523497b5609ad7d6c2ef140282df6f593fcac4c311646f3110cb6ae797cbd277cbcf27d3b4d82ffed1b64ef17e8bf0bacf446940ff2853b7730fdcd1f69d55b0cdab4002e9f9f8d47dc31ee54ae7f24bbe02161d2e3cea68925ebddc9c0239e31a6238a10b922925"}]}, 0x1210}, {&(0x7f0000000900)={0xd4, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, "", [@typed={0xc4, 0x56, @binary="465144964d6dad8bd62f8f10ea33a1855b2f461eda0d610983ccd57e9489ee7cf0d92021397f39ce014965fb81bebff0eef3a92ca7439dc5e7f87d0def5426262b561bd9aed0deac9731dc59c6505cf9b08e8acc2653b8e7bfc5cfea002f78ad629c16a80e00034860923491adaee0f0d351549a9e23a43c70f712ae5bc91217a1d63c669a51bcabb030ddc1a3e4d63eba08462c8659911c6a23639bce5b5fa32fb3c405b0a8702474480280112319edb332b9e77447630f752523f36224ebfd"}]}, 0xd4}, {&(0x7f0000006f80)={0x11d8, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, "", [@generic="a9446b987b820f61a974ff95bb2d7b515da7e6b2957b76e92583400d4a740fb37e326c5bd457e73b95d3c613cad8b543997d7eb26e6bd96044e627c3fb8f229f04da0f7cf18bf5c0c98602e610fa14ab841d7a40c047ba0894c4acaa1746036bb72ed03555e23a6cc375412c648aa6ede12f453f2d9de58cc70aa2619888399bce19ae9be80d1969977e05248938e2a105a3a3b4fc377d1c46ab959999435b43d77d69626156f35cefdb11f86181536b5ccfb1f849c11bf6253058d4f9359d5bd207ae20f6d56bffc2dcefe3b64da74f3322e003e838ea65488e7956a09aa8fbd712820baa6c728a695bcd58e4", @generic="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", @typed={0xd8, 0x6e, @binary="857693a91e729da10008fdc22614d1bae1fb61d327473a591bf0d972121729a905f2d636b06fba5e72f2c1069e17f6457b10e7d84d17886759a29b1a0d1ccce21ebc751038ef71093a00d10c52ce831489e028b6f17a505353b81f7c900e46bd1b8286cc6597291d80b484fbf33bddc54ec5d9c41e43aa6e8371f6bdf159bc7a000227bd2dc8b62389ba0de783bd9ff0f8c358b85d83ebf714c94bcee205489337301a7582bb35746061f8e5937325130a6e0bd86ef0fbfb036394ea5a25068d5ed396d5a078ff6da6a35a51cae04ce3ff7dcf27"}]}, 0x11d8}, {&(0x7f0000000a00)={0xa4, 0x1d, 0x12, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0x33}, @nested={0x90, 0x8e, [@generic="41227ae0b4807d2094c8be12687a0b9d9a2b1c6ccb86d2aaa87d187af63804303f1a3cea36403b8c07a2593dd2529a05cacab0b4751e9bda949d2d3fde82c2631860c872f9ee2bcfd5c14e2d9cf420d1d29f04d1c032cafde715813d175ed343c0f5ea9f80db930e9a5a3d0d7c3c8d843181d16140f37c8a946d0524f3dcd806a2b555f6", @typed={0x8, 0x23, @u32=0x9}]}]}, 0xa4}, {&(0x7f0000008200)={0x1c0, 0x40, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x1a, @uid=r10}, @nested={0xec, 0x4c, [@generic="16ae1336e7d76418d750f5da8bffcf094b79c1a3bec6f15025b48a2ee8503e166d5338819056d9f94e5a5f16e72ce09858aa60b0fa6b9ae854a125257ad9c6d95d349cde1c11689420ec52955714f968c2313a605c3a00548dd222e46b0f8ce2ee3392f0b7ad061e93a7004322a43b2aa51ce512d1dbc0fcc09094ab3a3a0cb23f2eeac02de4c0d3695da3a45a38e2d6ba67be72d2a70194e6469cb7c810e3103fa60e9ddce5c31293f3bcb89f4c14432dab47e3a4739368df0b72d0107eecfd41f3606efb58f111b9ebd150076d6c47b577f18d0796abe57724b3eca8278202692f5e86ad90"]}, @nested={0xc, 0x25, [@typed={0x8, 0x4b, @ipv4=@remote}]}, @generic="43ac9a7c4dac0b3f43b6eeeadae480820113f7472b5c13df6536c0a1e54b9c94efe6d24f578766cf64b9b78711bf332afc1e65186bb3982888ade1f24fbe8cc27f73215638b80749a55cb35eff854279a7b2844d6f9c7ad6340a84c06cb95f01393694d5e421f29b42d0ee572f3f49d1f3e4dd502b20134d853e12611a3d907b29a04805bf593d656b564c8ff0b87299bf9d029410916fc46f0c3b0e9941518af16b626da15de15701e98e3f72876690"]}, 0x1c0}, {&(0x7f00000083c0)={0x1408, 0x3d, 0x101, 0x70bd28, 0x25dfdbfe, "", [@nested={0x136c, 0x1f, [@generic="3c89c1929e3409606887499091d956deaf740bc86ee53fe0d6adf054704d10e1cab47fde60ebca5c55b5c6a394a3508f6ed045b0b2be70298411e1f80ce496aae9ed6bb20a2ec5b3db97abfb1099c73b7b75b2363f1ec60c96992a3c9f729de8fd99ecc8b761e368ac3de9e4c4d944c424730e37e6084333514fb31e40dbed28cadc70ecb62334864b8d0c1be2e9d8430a54dcc53564de2f9ab43f0096dfa754f3d3ffdc351c6698734ccf1595ec5a6998ef9110cc289d18049d1566c1e777445997bf3976c96e6dc60ca28c1ea3a2ba2ea31f497f5cd5648e1bb75e248f94", @generic="745b295c25f64fa7609dd6dfe5afab4e641c034d07c383c34548ed5455a9439865d94a0a029b9daa653aa5f742bb3ddf2d1ccb800ac3c726f91c38936e3d244c2bd4d951f67e87e44acc39345fa3d4866d1e2a752ef8089d986a16270b2f9ae1a1562f9ebbb11de57fdc51fdf54f95ba3d731f76757a2acd24b392bc7e3e602e615b5ec120303bf5", @generic="a6a943cd81bbca16d72914fece002bf460cc8a75681fa8b433b44e729406a2091bc06dabccef6833e27f4865b1c4cdbdc73474d8fa3baf148cec45ffff6df787a89fdb7ef0f165f4a0cfffc1fcfab008e4abe62c1763b36604e1a561a9fac9c4c06cbabe004a4387e665e843fa16274c8b5d01bb68d9b41f637ec8ffd0eba6b553ceddd14d6d52ab557c3944d5e573fff11d752ad4eeac21c3a74429ee1992d7dd0cc7420235686e5a9b72600db7a0483e3993452f4b90896ddeeb1ac910885bab1ad4ce1466fb17e06d0bee", @typed={0xc, 0x92, @u64=0x7ff}, @generic="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", @generic="f285907d8a2caf659ec7acf2b71321d6c7cdfecee289b47e66c31471a9c694acde69614299c29230b9c0beff81eba0347d86d843948d90b106a091bdb0747c365ac31bc1d1bc1b6c02daa7705bbbf905671c95fc4ccead464bed1d8a6b26bea450b52a317a07f49b2e85bf60df7c5f1860644b0b3e58f9bb47f729818026810e41b04475f4738612894d882ec6d0f2818f51b08fded40b886718315d0d16125c42d206664e5ecf57ebf9459ecb", @generic="50730f71791d6ae7a997c1e29f467db318f7ca26daf268592b444b50dce47724ee86d24431ce37e9be7c2eb5a06ce29b66578dc40c0b9c1de804d272b2176686e6c8372d0c1b1c6885b50d5a5c055edbe4e3229289bd91ad99a6de6744e803c225a973ed5336a843dea8685ea90afa3f5ecb0db10658d029e4c666"]}, @generic="7fd1d145fb348963dd087fcf9fa234de2dcd0c648266fc08ba4282c3c08cd3834a7c7a8cf8dc7e0d1460601432e73eb98528f50ce12dc59e3133d43d81b26d2e3432bb119342ae11b1b2fbf1a21af50e66dd14492cb8411c5c3ebc7025ebbd912bc33574bca9baceadb5c1e28aa6c37a3e714bd63659ec095fd259c8f1b3bb45c53c817d07f5de266a"]}, 0x1408}], 0xa, &(0x7f0000009f40)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}], 0x108, 0x40480d0}, 0x4800) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r23 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) dup2(r0, r23) 18:44:10 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:10 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000000)='pagemap\x00') ioctl$UI_DEV_DESTROY(r0, 0x5502) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xcd, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)=""/205}, &(0x7f0000000240)=0x78) 18:44:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) [ 243.010793] input: syz1 as /devices/virtual/input/input568 [ 243.038961] input: syz1 as /devices/virtual/input/input572 [ 243.113624] input: syz1 as /devices/virtual/input/input574 18:44:10 executing program 2 (fault-call:3 fault-nth:11): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acac03a9d344880c2b1ab5db1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd873569cf4786fc5166b0300000000001ff28d3ce3e3b8f81e34cf97c9c841cb2e962007a9a96549e3d259df17e29ed64bd6120813f9f0344e139506701e8fdedb60a69b5e4d0c67bda0"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:10 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000028}, 0xc, &(0x7f0000001140)={&(0x7f0000000100)={0x1020, 0x38, 0x400, 0x70bd26, 0x25dfdbff, {0x3}, [@nested={0x100c, 0x77, [@typed={0x8, 0x6c, @fd=r1}, @generic="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"]}]}, 0x1020}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280)='/dev/uinput\x00', 0x20e14154e04655a2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000011c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x4000) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000001200)=0x1) ioctl$UI_DEV_DESTROY(r2, 0x5502) 18:44:10 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:10 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xcc, 0x49730e529827a8ba) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) init_module(&(0x7f0000000000)='/dev/input/event#\x00', 0x12, &(0x7f0000000040)='/dev/input/event#\x00') ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) 18:44:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0xe, &(0x7f0000000100)={0x4}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xe) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_to_bridge\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000ffffffff03000000010000004df26fd1a9db733b1673517b5ee0ef3d50e5"]}) dup2(r0, r2) [ 243.332878] input: syz1 as /devices/virtual/input/input576 [ 243.348282] hid-generic 0000:0000:0000.0028: ignoring exceeding usage max 18:44:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x32, 0x0, @thr={&(0x7f0000000180)="2612428e752c5bce0f9492397eac122c960add9b6cb632449b831d6ec8dfaafa5b7e88814bb5d3f8539a4f578d20b57b87c04c7187033581d8f3a2a7fda3a6984361007757acda0eae29701da95dfe4beaf54030d0892b04e82207dc2322a3ffc2b31fe9dda1fe05bf815f1a99ad16bdba068ae7d177262ec527eead0c9172feb968a35e800a65ae", &(0x7f0000000240)="2d0d0b81987cd215a240db929a15c068d3e3881873092bd53c9414ad05fb047c7a6c9f8924d32dffe53cef2b4845788ae672cc10efb7a04557b35e37b842ce207d639cf97ed23650679e69ce9ed0409a57fca573ae27ccbaa2bd9f9b13113b725a4d1ec60146ddfc7fb7ebc79c8519c9261e71de5aa8a02dc54775f52785d3f8b35d2c4bbf481f1692b18b8cfae64a06f20884440b30eb9ffe6ec14b356e45db26e3f5bdab923a3e6ae7a4c10656ed671853407405c334811d2a6ae6485bc69d11aa953d631f7304d102edc93edf73527358949537e12d0f1ec512e95b5b753adbfb0f6c4788cbde464736d6da75ef59392df1d65c"}}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', r3}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:10 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 243.385504] input: syz1 as /devices/virtual/input/input577 [ 243.385858] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on sz1 [ 243.444700] input: syz1 as /devices/virtual/input/input580 [ 243.454617] FAULT_INJECTION: forcing a failure. [ 243.454617] name failslab, interval 1, probability 0, space 0, times 0 [ 243.493177] CPU: 1 PID: 12264 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 243.500305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.509648] Call Trace: [ 243.512216] dump_stack+0x138/0x19c [ 243.515829] should_fail.cold+0x10f/0x159 [ 243.519957] should_failslab+0xdb/0x130 [ 243.523917] kmem_cache_alloc_node+0x287/0x780 [ 243.528482] __alloc_skb+0x9c/0x500 [ 243.532096] ? skb_scrub_packet+0x4b0/0x4b0 [ 243.536398] ? netlink_has_listeners+0x20a/0x330 [ 243.541138] kobject_uevent_env+0x781/0xc23 [ 243.545454] ? wait_for_completion+0x420/0x420 [ 243.550111] kobject_uevent+0x20/0x26 [ 243.553896] device_del+0x65c/0xaa0 [ 243.557506] ? __device_links_no_driver+0x220/0x220 [ 243.562501] ? refcount_dec_and_test+0x1b/0x20 [ 243.567071] device_destroy+0x89/0xc0 [ 243.570854] ? root_device_unregister+0x80/0x80 [ 243.575506] hidraw_disconnect+0xf9/0x2b0 [ 243.579629] hid_disconnect+0x10b/0x180 [ 243.583582] hid_device_remove+0x179/0x230 [ 243.587796] device_release_driver_internal+0x2a9/0x540 [ 243.593137] ? hid_hw_close+0xd0/0xd0 [ 243.596915] device_release_driver+0x1a/0x20 [ 243.601299] bus_remove_device+0x2f0/0x4b0 [ 243.605510] device_del+0x3ce/0xaa0 [ 243.609116] ? lock_downgrade+0x6e0/0x6e0 [ 243.613240] ? __device_links_no_driver+0x220/0x220 [ 243.618247] hid_destroy_device+0xe4/0x160 [ 243.622467] uhid_dev_destroy+0x9c/0x100 [ 243.626503] uhid_char_write+0xab9/0xf00 [ 243.630542] __vfs_write+0x105/0x6b0 [ 243.634230] ? uhid_hid_stop+0x90/0x90 [ 243.638092] ? kernel_read+0x120/0x120 [ 243.641960] ? __inode_security_revalidate+0xd6/0x130 [ 243.647126] ? avc_policy_seqno+0x9/0x20 [ 243.651163] ? selinux_file_permission+0x85/0x480 [ 243.656003] ? security_file_permission+0x89/0x1f0 [ 243.660912] ? rw_verify_area+0xea/0x2b0 [ 243.664968] vfs_write+0x198/0x500 [ 243.668492] SyS_write+0xfd/0x230 [ 243.671930] ? SyS_read+0x230/0x230 [ 243.675537] ? do_syscall_64+0x53/0x640 [ 243.679500] ? SyS_read+0x230/0x230 [ 243.683113] do_syscall_64+0x1e8/0x640 [ 243.686978] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:44:11 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 243.691812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.696986] RIP: 0033:0x459829 [ 243.700152] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.707836] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 243.715090] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 243.722337] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 243.729584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 243.736832] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:11 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 243.754652] input: syz1 as /devices/virtual/input/input581 18:44:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getsig(0x4202, r2, 0x8, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80, 0x800) r4 = dup2(r0, r1) poll(&(0x7f0000000040)=[{r0, 0x1080}, {r0, 0x1000}, {r1, 0x3000}, {r1, 0x400}, {r0, 0x1000}, {r4, 0x4754}], 0x6, 0x6) 18:44:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x40080, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x7fff, 0x6, 0x1, 0x3, 0x800, 0x3, 0x200000000000, 0x8, 0x10, 0x7fffffff, 0xc7f5, 0xb3f, 0x0, 0xfffffffffffffaaa, 0x5, 0x9], 0xf000, 0x80}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000240)=0x30) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x200) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000000000000000000000100005000000000000000100000008000000000000ffffffffff040000000000000059404d59dbb20b1d6475620179fe5ebcd9d272add12042bec97bd4"]) ioctl$UI_DEV_DESTROY(r0, 0x5502) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000280)=0x68, 0x4) [ 243.825223] input: syz1 as /devices/virtual/input/input583 [ 243.873508] input: syz1 as /devices/virtual/input/input585 [ 243.897992] input: syz1 as /devices/virtual/input/input586 [ 244.001922] audit: type=1400 audit(1566067451.284:59): avc: denied { accept } for pid=12284 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 244.027396] input: syz1 as /devices/virtual/input/input589 18:44:11 executing program 2 (fault-call:3 fault-nth:12): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:11 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:11 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x80) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:44:11 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfea, 0x80480) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x10, @tick=0x8, 0x8, {0x13, 0x5}, 0xd43, 0x1, 0x40}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24020000", @ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf250800000020000500140002000800040004000000080001000100000008000100657468003400090008000100090000000800020005000000080002007f000000080001000700000008000200000800000800010004000000600007000c00030000000000000000000c00040014f3c72e000000000c000400ffff0000000000000c00040009000000000000000c00040007000000000000000c00030080000000000000000c000400040000000000000008000200010000001800020008000200001000000400040008000200000000001c0007000c00030000000000010000000c0004007f9f0000000000003c000200080002000180000008000100000000000400040008000100100f0000040004000800020001000080080002000100000008000100090000009c00040024000700080004000000008008000200070000000800040000000000080001001a0000000c00010073797a30000000000c00010073797a3000000000140007000800040006000000080004000002000014000700080002000500000008000300080000000c00010073797a30000000000c00010073797a31000000001c0007000800020097020000080001000c00000008000400f20f00005000010008000300050000000400020008000300ff03000008000300070000000c00020008000200070000000800030000000000140001006574683a6e657464657673696d3000000800030001000100c89472dfbc347ea44b702ed2887b09b3b23e4fcc0c6c7571cb38e4c434792c81492a8c4875abeaea6c1d26853d3f2754fb713324b896fb222013a97fe64185c062979d618d7c24a5136d7034d3a864b0504bc0fc3fd2b7f3cadbfaeda3d8e1cf304779bee9546089ef117ba242901e4ddf0d70504eb53e522062f9229d971277e1155741d3e896540ad5a052ab5d75ec6c06baa668b136c908a6"], 0x224}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x406402) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup2(r0, r4) [ 244.166998] input: syz1 as /devices/virtual/input/input590 [ 244.178211] input: syz1 as /devices/virtual/input/input591 [ 244.187499] input: syz1 as /devices/virtual/input/input592 [ 244.207858] hid-generic 0000:0000:0000.0029: ignoring exceeding usage max [ 244.243731] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on sz1 [ 244.263248] input: syz1 as /devices/virtual/input/input595 [ 244.278307] FAULT_INJECTION: forcing a failure. [ 244.278307] name failslab, interval 1, probability 0, space 0, times 0 [ 244.289733] CPU: 0 PID: 12330 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 244.296905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.306236] Call Trace: [ 244.308804] dump_stack+0x138/0x19c [ 244.312415] should_fail.cold+0x10f/0x159 [ 244.316546] should_failslab+0xdb/0x130 [ 244.320517] kmem_cache_alloc_node+0x287/0x780 [ 244.325080] __alloc_skb+0x9c/0x500 [ 244.328706] ? skb_scrub_packet+0x4b0/0x4b0 [ 244.333012] ? netlink_has_listeners+0x20a/0x330 [ 244.337762] kobject_uevent_env+0x781/0xc23 [ 244.342064] ? wait_for_completion+0x420/0x420 [ 244.346629] kobject_uevent+0x20/0x26 [ 244.350406] device_del+0x65c/0xaa0 [ 244.354019] ? __device_links_no_driver+0x220/0x220 [ 244.359029] ? refcount_dec_and_test+0x1b/0x20 [ 244.363598] device_destroy+0x89/0xc0 [ 244.367374] ? root_device_unregister+0x80/0x80 [ 244.372031] hidraw_disconnect+0xf9/0x2b0 [ 244.376156] hid_disconnect+0x10b/0x180 [ 244.380111] hid_device_remove+0x179/0x230 [ 244.384323] device_release_driver_internal+0x2a9/0x540 [ 244.389671] ? hid_hw_close+0xd0/0xd0 [ 244.393453] device_release_driver+0x1a/0x20 [ 244.397838] bus_remove_device+0x2f0/0x4b0 [ 244.402070] device_del+0x3ce/0xaa0 [ 244.405685] ? lock_downgrade+0x6e0/0x6e0 [ 244.409820] ? __device_links_no_driver+0x220/0x220 [ 244.414824] hid_destroy_device+0xe4/0x160 [ 244.419044] uhid_dev_destroy+0x9c/0x100 [ 244.423208] uhid_char_write+0xab9/0xf00 [ 244.427246] __vfs_write+0x105/0x6b0 [ 244.430943] ? uhid_hid_stop+0x90/0x90 [ 244.434835] ? kernel_read+0x120/0x120 [ 244.438735] ? __inode_security_revalidate+0xd6/0x130 [ 244.443905] ? avc_policy_seqno+0x9/0x20 [ 244.447944] ? selinux_file_permission+0x85/0x480 [ 244.452771] ? security_file_permission+0x89/0x1f0 [ 244.457687] ? rw_verify_area+0xea/0x2b0 [ 244.461729] vfs_write+0x198/0x500 [ 244.465255] SyS_write+0xfd/0x230 [ 244.468686] ? SyS_read+0x230/0x230 [ 244.472303] ? do_syscall_64+0x53/0x640 [ 244.476263] ? SyS_read+0x230/0x230 [ 244.479870] do_syscall_64+0x1e8/0x640 [ 244.483736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.488565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.493731] RIP: 0033:0x459829 [ 244.496912] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.504603] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 244.511856] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 244.519104] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 244.526363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 244.533608] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 18:44:11 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setparam(r0, &(0x7f00000000c0)=0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x101001, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) futex(&(0x7f0000000180)=0x1, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200), 0x1) gettid() r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 18:44:11 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 244.547496] input: syz1 as /devices/virtual/input/input596 18:44:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 244.595558] input: syz1 as /devices/virtual/input/input597 18:44:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000140)={0xa9, 0x20}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0xb, 0x5, {0x56, 0x1, 0x6, {0x5, 0x2}, {0x6, 0x3}, @rumble={0x7fffffff}}, {0x54, 0xfffffffffffff30b, 0x4, {0x6}, {0x8, 0x3}, @rumble={0x7fff, 0x4}}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r2) [ 244.655744] input: syz1 as /devices/virtual/input/input598 [ 244.666778] input: syz1 as /devices/virtual/input/input599 18:44:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 244.750237] input: syz1 as /devices/virtual/input/input601 [ 244.775187] input: syz1 as /devices/virtual/input/input603 18:44:12 executing program 2 (fault-call:3 fault-nth:13): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:12 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) rt_sigqueueinfo(r1, 0xf, &(0x7f00000000c0)={0x22, 0x2, 0x2dbe1c2a}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x8, 0xc2, &(0x7f0000000100)="6cffdd91a4c961f8985d18028f001c0025529e994c4f244a549556365f4043aea39f5b3ede98a4bdca65fb776388c87a28f43964bd9496953a3519364866b526a1c8958c26a755ec5bd0a5bfbc1245b215bd0558e51618199107117ac27d73fa", &(0x7f0000000040)="b744e0f4465884ea04f24bcfb4b8f62634428341c00a56f5d0ce5d5ff62a9bd4bafff028e289b179ad3dfa4474a5fd3b176b6d6e6d9d", 0x60, 0x36}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2004, 0x2) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r2) 18:44:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r0) [ 245.023506] input: syz1 as /devices/virtual/input/input607 [ 245.035525] input: syz1 as /devices/virtual/input/input608 [ 245.056124] input: syz1 as /devices/virtual/input/input609 [ 245.056574] hid-generic 0000:0000:0000.002A: ignoring exceeding usage max 18:44:12 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 245.136005] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on sz1 [ 245.145690] input: syz1 as /devices/virtual/input/input612 18:44:12 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 245.179997] FAULT_INJECTION: forcing a failure. [ 245.179997] name failslab, interval 1, probability 0, space 0, times 0 [ 245.205854] CPU: 1 PID: 12402 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 245.212978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.222322] Call Trace: [ 245.222339] dump_stack+0x138/0x19c 18:44:12 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 245.222359] should_fail.cold+0x10f/0x159 [ 245.222375] should_failslab+0xdb/0x130 [ 245.222390] kmem_cache_alloc_node_trace+0x280/0x770 [ 245.222404] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 245.222418] __kmalloc_node_track_caller+0x3d/0x80 [ 245.228603] __kmalloc_reserve.isra.0+0x40/0xe0 [ 245.228617] __alloc_skb+0xcf/0x500 [ 245.228628] ? skb_scrub_packet+0x4b0/0x4b0 [ 245.228642] ? netlink_has_listeners+0x20a/0x330 [ 245.228658] kobject_uevent_env+0x781/0xc23 [ 245.236737] ? wait_for_completion+0x420/0x420 [ 245.236758] kobject_uevent+0x20/0x26 [ 245.236769] device_del+0x65c/0xaa0 [ 245.236782] ? __device_links_no_driver+0x220/0x220 [ 245.236794] ? refcount_dec_and_test+0x1b/0x20 [ 245.273837] device_destroy+0x89/0xc0 [ 245.273848] ? root_device_unregister+0x80/0x80 [ 245.273864] hidraw_disconnect+0xf9/0x2b0 [ 245.273876] hid_disconnect+0x10b/0x180 [ 245.273886] hid_device_remove+0x179/0x230 [ 245.273899] device_release_driver_internal+0x2a9/0x540 [ 245.273909] ? hid_hw_close+0xd0/0xd0 [ 245.299218] device_release_driver+0x1a/0x20 [ 245.299229] bus_remove_device+0x2f0/0x4b0 [ 245.299243] device_del+0x3ce/0xaa0 [ 245.299257] ? lock_downgrade+0x6e0/0x6e0 [ 245.299267] ? __device_links_no_driver+0x220/0x220 [ 245.308064] hid_destroy_device+0xe4/0x160 [ 245.308078] uhid_dev_destroy+0x9c/0x100 [ 245.308088] uhid_char_write+0xab9/0xf00 [ 245.308103] __vfs_write+0x105/0x6b0 [ 245.308118] ? uhid_hid_stop+0x90/0x90 [ 245.321632] ? kernel_read+0x120/0x120 [ 245.321645] ? __inode_security_revalidate+0xd6/0x130 [ 245.321657] ? avc_policy_seqno+0x9/0x20 18:44:12 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 245.321667] ? selinux_file_permission+0x85/0x480 [ 245.321680] ? security_file_permission+0x89/0x1f0 [ 245.321691] ? rw_verify_area+0xea/0x2b0 [ 245.321701] vfs_write+0x198/0x500 [ 245.321713] SyS_write+0xfd/0x230 [ 245.321724] ? SyS_read+0x230/0x230 [ 245.337729] ? do_syscall_64+0x53/0x640 [ 245.337742] ? SyS_read+0x230/0x230 [ 245.337754] do_syscall_64+0x1e8/0x640 [ 245.337764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.337781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.337791] RIP: 0033:0x459829 18:44:12 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.346910] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.346921] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 245.346927] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 245.346933] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 245.346939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 245.346944] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 245.546856] input: syz1 as /devices/virtual/input/input618 [ 245.626442] input: syz1 as /devices/virtual/input/input621 18:44:13 executing program 2 (fault-call:3 fault-nth:14): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xa3f, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:44:13 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:13 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5d2, 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000040)=""/122, &(0x7f00000000c0)=0x7a) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x9, 0x7}, &(0x7f0000000180)=0xc) dup2(r0, r1) [ 245.859637] input: syz1 as /devices/virtual/input/input622 [ 245.867026] input: syz1 as /devices/virtual/input/input623 [ 245.876974] hid-generic 0000:0000:0000.002B: ignoring exceeding usage max [ 245.892222] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on sz1 [ 245.929886] input: syz1 as /devices/virtual/input/input624 [ 245.943321] FAULT_INJECTION: forcing a failure. [ 245.943321] name failslab, interval 1, probability 0, space 0, times 0 [ 245.965094] CPU: 1 PID: 12473 Comm: syz-executor.2 Not tainted 4.14.139 #35 18:44:13 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 245.972213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.981650] Call Trace: [ 245.981669] dump_stack+0x138/0x19c [ 245.981689] should_fail.cold+0x10f/0x159 [ 245.981705] should_failslab+0xdb/0x130 [ 245.981723] kmem_cache_alloc_node+0x287/0x780 [ 245.987912] __alloc_skb+0x9c/0x500 [ 245.987923] ? skb_scrub_packet+0x4b0/0x4b0 [ 245.987938] ? netlink_has_listeners+0x20a/0x330 [ 245.987952] kobject_uevent_env+0x781/0xc23 [ 245.996038] ? wait_for_completion+0x420/0x420 [ 245.996058] kobject_uevent+0x20/0x26 [ 245.996068] device_del+0x65c/0xaa0 [ 245.996085] ? __device_links_no_driver+0x220/0x220 [ 246.022154] ? refcount_dec_and_test+0x1b/0x20 [ 246.022168] device_destroy+0x89/0xc0 [ 246.022176] ? root_device_unregister+0x80/0x80 [ 246.022191] hidraw_disconnect+0xf9/0x2b0 [ 246.029577] hid_disconnect+0x10b/0x180 [ 246.029588] hid_device_remove+0x179/0x230 [ 246.029604] device_release_driver_internal+0x2a9/0x540 [ 246.029612] ? hid_hw_close+0xd0/0xd0 [ 246.029624] device_release_driver+0x1a/0x20 [ 246.051744] bus_remove_device+0x2f0/0x4b0 [ 246.051759] device_del+0x3ce/0xaa0 [ 246.051773] ? lock_downgrade+0x6e0/0x6e0 [ 246.051785] ? __device_links_no_driver+0x220/0x220 [ 246.059965] hid_destroy_device+0xe4/0x160 [ 246.059978] uhid_dev_destroy+0x9c/0x100 [ 246.059988] uhid_char_write+0xab9/0xf00 [ 246.060002] __vfs_write+0x105/0x6b0 [ 246.060015] ? uhid_hid_stop+0x90/0x90 [ 246.069143] ? kernel_read+0x120/0x120 [ 246.069155] ? __inode_security_revalidate+0xd6/0x130 [ 246.069167] ? avc_policy_seqno+0x9/0x20 [ 246.069178] ? selinux_file_permission+0x85/0x480 [ 246.069193] ? security_file_permission+0x89/0x1f0 [ 246.133079] ? rw_verify_area+0xea/0x2b0 [ 246.137120] vfs_write+0x198/0x500 [ 246.140652] SyS_write+0xfd/0x230 [ 246.144092] ? SyS_read+0x230/0x230 [ 246.147698] ? do_syscall_64+0x53/0x640 [ 246.151647] ? SyS_read+0x230/0x230 [ 246.155250] do_syscall_64+0x1e8/0x640 [ 246.159122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.163953] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.169115] RIP: 0033:0x459829 [ 246.172282] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:44:13 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 246.179965] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 246.187212] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 246.194459] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 246.201709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 246.208961] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:13 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 246.263042] input: syz1 as /devices/virtual/input/input628 18:44:13 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="c296c333be03a8ea8f8e1b80b84fb64b9b344597aea9808dc62dcbe7157cee69c87338e7dd2cef48a5dfc37828b33e71a175d6a48da30c121558b611a5ab2dd2f9a8446e79a60daec4268f63372e79a9b4eb", 0x52}, {&(0x7f00000000c0)="b9243424820c3e0db7fdf8bac2207c9ecd76f40ac97d953e9399856357a91fc8d6e905a41ead59c499bada6038ead34fb80c5e98e775ba4ec97d6ba966d62fc35670213bfc9dbba7f8fdfeac002efe9632435d955b72d187134ae0fbc3751a1263286f7642e0735229a6a02a4dee80cdf7ee2c", 0x73}, {&(0x7f0000000140)="5c361787f9170127c92b30704b2978533719fc9665a1f5cf487260b64994551e9253a3f5d61e760acdc5b4ea7543d2c5c1719e", 0x33}], 0x3) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffffe0, 0x2080) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r2) [ 246.325415] input: syz1 as /devices/virtual/input/input631 [ 246.380933] input: syz1 as /devices/virtual/input/input632 [ 246.438824] input: syz1 as /devices/virtual/input/input633 [ 246.496786] input: syz1 as /devices/virtual/input/input634 [ 246.564854] input: syz1 as /devices/virtual/input/input635 18:44:13 executing program 2 (fault-call:3 fault-nth:15): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = dup2(r0, r1) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7f454c46ff000004bc4f0000000000000200060000000000ca0100003800000023010000060000000104200002000000bc0407000000000001000000050000007f0000000100000067e3736c07000000010000002b000000297c70570000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048d2d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033634400"/2143], 0x85c) 18:44:13 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:13 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:13 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r1 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x800, 0x400) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/224) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 18:44:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x111000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x1c, "5a40bb04630110a32905d5b929eb33185606723b9a83956f7f342fd21fac89b92e2a8402cfe4266569f69016b51d4b91e29e309c0a8b01ddeef1f4249a459518", "abce810aaaa2250b3a977b1de7d99b74a91cf69246caf67b2bcfeb926887dd2f", [0x9, 0x7]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) dup2(r0, 0xffffffffffffffff) [ 246.709783] input: syz1 as /devices/virtual/input/input636 [ 246.718182] input: syz1 as /devices/virtual/input/input637 [ 246.729073] hid-generic 0000:0000:0000.002C: ignoring exceeding usage max [ 246.747381] input: syz1 as /devices/virtual/input/input638 18:44:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_TSC(0x1a, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfffffffffffffffa, 0x3, 0x5b7, 0x2, 0xfffffffffffffff9, 0x3f31430a, 0x1}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) [ 246.757611] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 246.833948] FAULT_INJECTION: forcing a failure. [ 246.833948] name failslab, interval 1, probability 0, space 0, times 0 [ 246.857958] CPU: 0 PID: 12537 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 246.865089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.874433] Call Trace: [ 246.877015] dump_stack+0x138/0x19c [ 246.877035] should_fail.cold+0x10f/0x159 [ 246.877050] should_failslab+0xdb/0x130 [ 246.877062] kmem_cache_alloc_node+0x287/0x780 [ 246.884815] __alloc_skb+0x9c/0x500 [ 246.884826] ? skb_scrub_packet+0x4b0/0x4b0 [ 246.884837] ? netlink_has_listeners+0x20a/0x330 [ 246.884849] kobject_uevent_env+0x781/0xc23 [ 246.910980] ? wait_for_completion+0x420/0x420 [ 246.915565] kobject_uevent+0x20/0x26 [ 246.915578] device_del+0x65c/0xaa0 [ 246.915589] ? __device_links_no_driver+0x220/0x220 [ 246.915603] ? refcount_dec_and_test+0x1b/0x20 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 246.922992] device_destroy+0x89/0xc0 [ 246.923002] ? root_device_unregister+0x80/0x80 [ 246.923017] hidraw_disconnect+0xf9/0x2b0 [ 246.923028] hid_disconnect+0x10b/0x180 [ 246.923039] hid_device_remove+0x179/0x230 [ 246.923053] device_release_driver_internal+0x2a9/0x540 [ 246.923060] ? hid_hw_close+0xd0/0xd0 [ 246.923073] device_release_driver+0x1a/0x20 [ 246.923080] bus_remove_device+0x2f0/0x4b0 [ 246.923092] device_del+0x3ce/0xaa0 [ 246.932659] ? lock_downgrade+0x6e0/0x6e0 [ 246.978863] ? __device_links_no_driver+0x220/0x220 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 246.983880] hid_destroy_device+0xe4/0x160 [ 246.983893] uhid_dev_destroy+0x9c/0x100 [ 246.983904] uhid_char_write+0xab9/0xf00 [ 246.983919] __vfs_write+0x105/0x6b0 [ 246.983928] ? uhid_hid_stop+0x90/0x90 [ 246.983938] ? kernel_read+0x120/0x120 [ 246.983949] ? __inode_security_revalidate+0xd6/0x130 [ 246.983963] ? avc_policy_seqno+0x9/0x20 [ 246.992228] ? selinux_file_permission+0x85/0x480 [ 246.999963] ? security_file_permission+0x89/0x1f0 [ 246.999977] ? rw_verify_area+0xea/0x2b0 [ 246.999989] vfs_write+0x198/0x500 18:44:14 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 247.000001] SyS_write+0xfd/0x230 [ 247.037699] ? SyS_read+0x230/0x230 [ 247.041326] ? do_syscall_64+0x53/0x640 [ 247.045298] ? SyS_read+0x230/0x230 [ 247.048929] do_syscall_64+0x1e8/0x640 [ 247.052808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.052844] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.052852] RIP: 0033:0x459829 [ 247.052858] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.052869] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 247.052875] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 247.052880] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 247.052885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 247.052890] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 247.117147] input: syz1 as /devices/virtual/input/input641 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 247.129911] input: syz1 as /devices/virtual/input/input645 [ 247.214430] input: syz1 as /devices/virtual/input/input649 18:44:14 executing program 2 (fault-call:3 fault-nth:16): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:14 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x800000000004, 0x367800) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) 18:44:14 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:14 executing program 5: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)=""/233, &(0x7f0000000240)=0xe9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)='/dev/input/event#\x00'}, 0x30) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000380)) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r3) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') [ 247.539002] input: syz1 as /devices/virtual/input/input650 [ 247.546140] input: syz1 as /devices/virtual/input/input651 [ 247.561662] hid-generic 0000:0000:0000.002D: ignoring exceeding usage max [ 247.578236] input: syz1 as /devices/virtual/input/input652 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 247.597910] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on sz1 [ 247.624350] input: syz1 as /devices/virtual/input/input654 18:44:14 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 247.658926] input: syz1 as /devices/virtual/input/input656 [ 247.688662] FAULT_INJECTION: forcing a failure. [ 247.688662] name failslab, interval 1, probability 0, space 0, times 0 [ 247.722072] CPU: 0 PID: 12596 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 247.729219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.738567] Call Trace: [ 247.738586] dump_stack+0x138/0x19c [ 247.738606] should_fail.cold+0x10f/0x159 [ 247.738623] should_failslab+0xdb/0x130 [ 247.738636] kmem_cache_alloc_trace+0x2e9/0x790 [ 247.748952] ? wait_for_completion+0x420/0x420 [ 247.748974] uhid_queue_event+0x4c/0xe0 [ 247.748986] uhid_hid_stop+0x6f/0x90 [ 247.748997] hid_device_remove+0x1c3/0x230 [ 247.749011] device_release_driver_internal+0x2a9/0x540 [ 247.757614] ? hid_hw_close+0xd0/0xd0 [ 247.757629] device_release_driver+0x1a/0x20 [ 247.757639] bus_remove_device+0x2f0/0x4b0 [ 247.757652] device_del+0x3ce/0xaa0 [ 247.757666] ? lock_downgrade+0x6e0/0x6e0 [ 247.757676] ? __device_links_no_driver+0x220/0x220 [ 247.766201] hid_destroy_device+0xe4/0x160 [ 247.766213] uhid_dev_destroy+0x9c/0x100 [ 247.766223] uhid_char_write+0xab9/0xf00 [ 247.766239] __vfs_write+0x105/0x6b0 18:44:15 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 247.766248] ? uhid_hid_stop+0x90/0x90 [ 247.766258] ? kernel_read+0x120/0x120 [ 247.774167] ? __inode_security_revalidate+0xd6/0x130 [ 247.774180] ? avc_policy_seqno+0x9/0x20 [ 247.774191] ? selinux_file_permission+0x85/0x480 [ 247.774204] ? security_file_permission+0x89/0x1f0 [ 247.774216] ? rw_verify_area+0xea/0x2b0 [ 247.774228] vfs_write+0x198/0x500 [ 247.787744] SyS_write+0xfd/0x230 [ 247.787755] ? SyS_read+0x230/0x230 [ 247.787766] ? do_syscall_64+0x53/0x640 [ 247.795589] ? SyS_read+0x230/0x230 [ 247.795603] do_syscall_64+0x1e8/0x640 [ 247.795612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.795630] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.795637] RIP: 0033:0x459829 [ 247.795643] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 [ 247.804763] ORIG_RAX: 0000000000000001 [ 247.820758] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 247.820764] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 247.820770] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 18:44:15 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) r5 = dup2(r0, r2) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000500)={0x15, 0xc3, &(0x7f0000000400)="36704f0d57dbebaa24c93d9e853362d0c10a89b0ac05d83fa4aa35af2886b9f6bd47bc6609319991549a6f9f488939770f7198aa412bfc843af642e0e8aee3af4a6f13da7f7d42595db17be16ecd16d99ce7d3679006d258686777dcd3a91bf76953553a98f038dedf9898040e3f5bc2bbad8c55cb34e93a6c783249db0278ac67f5dce60822555b8728be95a910dafcafa8a76e397e9545ab4fe903dba92e8dd825433b5c65dde4208d5be10cc75d9e66e974dd5d1de1a89302ff9e4ed470b6f3e27f"}) [ 247.820776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 247.820782] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 247.904408] input: syz1 as /devices/virtual/input/input658 [ 247.959555] input: syz1 as /devices/virtual/input/input661 [ 248.038005] input: syz1 as /devices/virtual/input/input663 18:44:15 executing program 2 (fault-call:3 fault-nth:17): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:15 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:15 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:15 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$peek(0x3, r0, &(0x7f0000000040)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="5b722ec24650f78ac46d8defe142323f403a3b280a657cacbb1160811da3543363a94a8877557f9d05816504091d764ebe919ea9de52eebb", 0x38, 0xfffffffffffffffa) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r5 = getegid() keyctl$chown(0x4, r2, r4, r5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={r3, @empty, @empty}, 0xc) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) dup2(r1, r7) 18:44:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) r5 = dup2(r0, r2) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000500)={0x15, 0xc3, &(0x7f0000000400)="36704f0d57dbebaa24c93d9e853362d0c10a89b0ac05d83fa4aa35af2886b9f6bd47bc6609319991549a6f9f488939770f7198aa412bfc843af642e0e8aee3af4a6f13da7f7d42595db17be16ecd16d99ce7d3679006d258686777dcd3a91bf76953553a98f038dedf9898040e3f5bc2bbad8c55cb34e93a6c783249db0278ac67f5dce60822555b8728be95a910dafcafa8a76e397e9545ab4fe903dba92e8dd825433b5c65dde4208d5be10cc75d9e66e974dd5d1de1a89302ff9e4ed470b6f3e27f"}) 18:44:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x220800, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfff, 0x400000) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}, 0x32) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x7fff}) [ 248.384329] input: syz1 as /devices/virtual/input/input665 [ 248.408150] input: syz1 as /devices/virtual/input/input667 [ 248.437052] input: syz1 as /devices/virtual/input/input669 18:44:15 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) socket$inet_sctp(0x2, 0x5, 0x84) 18:44:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) r5 = dup2(r0, r2) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000500)={0x15, 0xc3, &(0x7f0000000400)="36704f0d57dbebaa24c93d9e853362d0c10a89b0ac05d83fa4aa35af2886b9f6bd47bc6609319991549a6f9f488939770f7198aa412bfc843af642e0e8aee3af4a6f13da7f7d42595db17be16ecd16d99ce7d3679006d258686777dcd3a91bf76953553a98f038dedf9898040e3f5bc2bbad8c55cb34e93a6c783249db0278ac67f5dce60822555b8728be95a910dafcafa8a76e397e9545ab4fe903dba92e8dd825433b5c65dde4208d5be10cc75d9e66e974dd5d1de1a89302ff9e4ed470b6f3e27f"}) [ 248.563453] input: syz1 as /devices/virtual/input/input672 [ 248.587857] input: syz1 as /devices/virtual/input/input673 [ 248.597788] hid-generic 0000:0000:0000.002E: ignoring exceeding usage max 18:44:15 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 248.616556] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/14) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:44:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) dup2(r0, r2) [ 248.667093] FAULT_INJECTION: forcing a failure. [ 248.667093] name failslab, interval 1, probability 0, space 0, times 0 [ 248.694520] input: syz1 as /devices/virtual/input/input676 [ 248.755860] input: syz1 as /devices/virtual/input/input677 [ 248.782135] CPU: 0 PID: 12672 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 248.789266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.798620] Call Trace: [ 248.801211] dump_stack+0x138/0x19c [ 248.804850] should_fail.cold+0x10f/0x159 [ 248.809013] should_failslab+0xdb/0x130 [ 248.813496] kmem_cache_alloc_trace+0x2e9/0x790 [ 248.813510] ? device_pm_check_callbacks+0x10d/0x450 [ 248.813525] ? devm_device_remove_groups+0x50/0x50 [ 248.813539] kobject_uevent_env+0x378/0xc23 [ 248.823287] ? _raw_spin_unlock_irq+0x28/0x90 [ 248.823307] kobject_uevent+0x20/0x26 [ 248.823320] device_release_driver_internal+0x443/0x540 [ 248.823329] ? hid_hw_close+0xd0/0xd0 [ 248.823341] device_release_driver+0x1a/0x20 [ 248.823350] bus_remove_device+0x2f0/0x4b0 [ 248.823363] device_del+0x3ce/0xaa0 [ 248.832575] ? lock_downgrade+0x6e0/0x6e0 [ 248.832585] ? __device_links_no_driver+0x220/0x220 [ 248.832601] hid_destroy_device+0xe4/0x160 [ 248.832612] uhid_dev_destroy+0x9c/0x100 [ 248.832621] uhid_char_write+0xab9/0xf00 [ 248.832639] __vfs_write+0x105/0x6b0 [ 248.871377] ? uhid_hid_stop+0x90/0x90 [ 248.871391] ? kernel_read+0x120/0x120 [ 248.871408] ? __inode_security_revalidate+0xd6/0x130 [ 248.871420] ? avc_policy_seqno+0x9/0x20 [ 248.871428] ? selinux_file_permission+0x85/0x480 [ 248.871440] ? security_file_permission+0x89/0x1f0 [ 248.879727] ? rw_verify_area+0xea/0x2b0 [ 248.879741] vfs_write+0x198/0x500 [ 248.879755] SyS_write+0xfd/0x230 [ 248.879766] ? SyS_read+0x230/0x230 [ 248.879778] ? do_syscall_64+0x53/0x640 [ 248.887509] ? SyS_read+0x230/0x230 [ 248.887523] do_syscall_64+0x1e8/0x640 [ 248.887533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.887549] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.887560] RIP: 0033:0x459829 [ 248.953361] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.961049] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 248.968295] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 248.975548] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 248.982803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 248.990052] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 249.123273] input: syz1 as /devices/virtual/input/input679 18:44:16 executing program 2 (fault-call:3 fault-nth:18): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:16 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) 18:44:16 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000080)={0x4ea}, 0x8, 0x800) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) [ 249.413966] input: syz1 as /devices/virtual/input/input681 [ 249.421864] hid-generic 0000:0000:0000.002F: ignoring exceeding usage max [ 249.444360] input: syz1 as /devices/virtual/input/input682 [ 249.444641] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:16 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x100, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 249.479883] input: syz1 as /devices/virtual/input/input683 [ 249.509477] FAULT_INJECTION: forcing a failure. [ 249.509477] name failslab, interval 1, probability 0, space 0, times 0 18:44:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 249.538392] input: syz1 as /devices/virtual/input/input685 [ 249.586606] CPU: 0 PID: 12718 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 249.593731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.603069] Call Trace: [ 249.603088] dump_stack+0x138/0x19c [ 249.603105] should_fail.cold+0x10f/0x159 [ 249.603121] should_failslab+0xdb/0x130 [ 249.617399] __kmalloc+0x2f0/0x7a0 [ 249.620939] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 249.626410] ? kobject_uevent_env+0x378/0xc23 [ 249.630901] ? rcu_read_lock_sched_held+0x110/0x130 [ 249.630913] ? kobject_get_path+0xbb/0x1a0 [ 249.630926] kobject_get_path+0xbb/0x1a0 [ 249.630938] ? devm_device_remove_groups+0x50/0x50 [ 249.630949] kobject_uevent_env+0x39c/0xc23 [ 249.630959] ? _raw_spin_unlock_irq+0x28/0x90 [ 249.630975] kobject_uevent+0x20/0x26 [ 249.630987] device_release_driver_internal+0x443/0x540 [ 249.630997] ? hid_hw_close+0xd0/0xd0 [ 249.631007] device_release_driver+0x1a/0x20 [ 249.631018] bus_remove_device+0x2f0/0x4b0 [ 249.649192] device_del+0x3ce/0xaa0 18:44:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={r1, 0x3}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 249.649207] ? lock_downgrade+0x6e0/0x6e0 [ 249.649217] ? __device_links_no_driver+0x220/0x220 [ 249.649234] hid_destroy_device+0xe4/0x160 [ 249.649244] uhid_dev_destroy+0x9c/0x100 [ 249.649254] uhid_char_write+0xab9/0xf00 [ 249.658039] __vfs_write+0x105/0x6b0 [ 249.658051] ? uhid_hid_stop+0x90/0x90 [ 249.658061] ? kernel_read+0x120/0x120 [ 249.658073] ? __inode_security_revalidate+0xd6/0x130 [ 249.658083] ? avc_policy_seqno+0x9/0x20 [ 249.658094] ? selinux_file_permission+0x85/0x480 [ 249.667222] ? security_file_permission+0x89/0x1f0 [ 249.667236] ? rw_verify_area+0xea/0x2b0 [ 249.667249] vfs_write+0x198/0x500 [ 249.667263] SyS_write+0xfd/0x230 [ 249.667274] ? SyS_read+0x230/0x230 [ 249.667286] ? do_syscall_64+0x53/0x640 [ 249.675458] ? SyS_read+0x230/0x230 [ 249.675473] do_syscall_64+0x1e8/0x640 [ 249.675482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.675499] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.675507] RIP: 0033:0x459829 [ 249.675514] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 [ 249.683327] ORIG_RAX: 0000000000000001 18:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 249.683334] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 249.683340] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 249.683346] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 249.683351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 249.683363] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 249.823349] input: syz1 as /devices/virtual/input/input689 [ 249.833850] input: syz1 as /devices/virtual/input/input688 18:44:17 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x100, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 249.895601] input: syz1 as /devices/virtual/input/input691 [ 249.986784] input: syz1 as /devices/virtual/input/input692 18:44:17 executing program 2 (fault-call:3 fault-nth:19): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) 18:44:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x401) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x80000000, 0x1, 0x80, 0x9, 0x10, 0x49}) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:44:17 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2d8043, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x1fa9d) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x5c, 0x6, 0x80, 0xa9]}) 18:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:17 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 250.254840] hid-generic 0000:0000:0000.0030: ignoring exceeding usage max [ 250.271269] input: syz1 as /devices/virtual/input/input696 [ 250.292069] input: syz1 as /devices/virtual/input/input694 [ 250.294781] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on sz1 [ 250.308323] input: syz1 as /devices/virtual/input/input697 [ 250.354350] FAULT_INJECTION: forcing a failure. [ 250.354350] name failslab, interval 1, probability 0, space 0, times 0 [ 250.367233] CPU: 0 PID: 12785 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 250.374342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.383675] Call Trace: [ 250.386244] dump_stack+0x138/0x19c [ 250.389851] should_fail.cold+0x10f/0x159 [ 250.393982] should_failslab+0xdb/0x130 [ 250.397943] kmem_cache_alloc_node+0x287/0x780 [ 250.402506] __alloc_skb+0x9c/0x500 [ 250.406109] ? skb_scrub_packet+0x4b0/0x4b0 [ 250.410407] ? netlink_has_listeners+0x20a/0x330 [ 250.415160] kobject_uevent_env+0x781/0xc23 [ 250.419466] ? _raw_spin_unlock_irq+0x28/0x90 [ 250.423950] kobject_uevent+0x20/0x26 [ 250.427736] device_release_driver_internal+0x443/0x540 [ 250.433090] ? hid_hw_close+0xd0/0xd0 [ 250.436876] device_release_driver+0x1a/0x20 [ 250.441278] bus_remove_device+0x2f0/0x4b0 [ 250.445500] device_del+0x3ce/0xaa0 [ 250.449109] ? lock_downgrade+0x6e0/0x6e0 [ 250.453254] ? __device_links_no_driver+0x220/0x220 [ 250.458260] hid_destroy_device+0xe4/0x160 [ 250.462473] uhid_dev_destroy+0x9c/0x100 [ 250.466513] uhid_char_write+0xab9/0xf00 [ 250.470551] __vfs_write+0x105/0x6b0 [ 250.474244] ? uhid_hid_stop+0x90/0x90 [ 250.478124] ? kernel_read+0x120/0x120 [ 250.481988] ? __inode_security_revalidate+0xd6/0x130 [ 250.487156] ? avc_policy_seqno+0x9/0x20 [ 250.491200] ? selinux_file_permission+0x85/0x480 [ 250.496029] ? security_file_permission+0x89/0x1f0 [ 250.500939] ? rw_verify_area+0xea/0x2b0 [ 250.504986] vfs_write+0x198/0x500 [ 250.508517] SyS_write+0xfd/0x230 [ 250.511955] ? SyS_read+0x230/0x230 [ 250.515562] ? do_syscall_64+0x53/0x640 [ 250.519515] ? SyS_read+0x230/0x230 [ 250.523117] do_syscall_64+0x1e8/0x640 [ 250.526985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.531821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.537004] RIP: 0033:0x459829 [ 250.540169] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.547854] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 18:44:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) 18:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 250.555097] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 250.562340] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 250.569590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 250.576846] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:17 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) [ 250.651428] input: syz1 as /devices/virtual/input/input700 18:44:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 250.725918] input: syz1 as /devices/virtual/input/input702 [ 250.784516] input: syz1 as /devices/virtual/input/input705 [ 250.860899] input: syz1 as /devices/virtual/input/input707 18:44:18 executing program 2 (fault-call:3 fault-nth:20): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) socketpair(0x5, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/30, &(0x7f0000000100)=0x1e) r3 = syz_open_dev$audion(&(0x7f0000004580)='/dev/audio#\x00', 0x81, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004600)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, r4, 0x700, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) dup2(r0, r1) 18:44:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x0, 0x2}}, 0x20) 18:44:18 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x4, 0x7ff, 0x3, 0x100, 0x7f, 0xd}) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 251.095489] input: syz1 as /devices/virtual/input/input709 [ 251.109356] hid-generic 0000:0000:0000.0031: ignoring exceeding usage max [ 251.119834] input: syz1 as /devices/virtual/input/input710 [ 251.130942] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) [ 251.148097] input: syz1 as /devices/virtual/input/input711 18:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 251.199025] FAULT_INJECTION: forcing a failure. [ 251.199025] name failslab, interval 1, probability 0, space 0, times 0 [ 251.241292] input: syz1 as /devices/virtual/input/input713 [ 251.261580] CPU: 0 PID: 12850 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 251.268704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.278056] Call Trace: [ 251.280644] dump_stack+0x138/0x19c [ 251.284289] should_fail.cold+0x10f/0x159 [ 251.288439] should_failslab+0xdb/0x130 [ 251.292413] __kmalloc+0x2f0/0x7a0 [ 251.295949] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.301399] ? kobject_uevent_env+0x378/0xc23 [ 251.301412] ? rcu_read_lock_sched_held+0x110/0x130 [ 251.301422] ? kobject_get_path+0xbb/0x1a0 [ 251.301435] kobject_get_path+0xbb/0x1a0 [ 251.301447] ? devm_device_remove_groups+0x50/0x50 [ 251.301458] kobject_uevent_env+0x39c/0xc23 [ 251.301467] ? _raw_spin_unlock_irq+0x28/0x90 [ 251.301483] kobject_uevent+0x20/0x26 18:44:18 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 251.301495] device_release_driver_internal+0x443/0x540 [ 251.301505] ? hid_hw_close+0xd0/0xd0 [ 251.301517] device_release_driver+0x1a/0x20 [ 251.301525] bus_remove_device+0x2f0/0x4b0 [ 251.301540] device_del+0x3ce/0xaa0 [ 251.311022] ? lock_downgrade+0x6e0/0x6e0 [ 251.311033] ? __device_links_no_driver+0x220/0x220 [ 251.311050] hid_destroy_device+0xe4/0x160 [ 251.311062] uhid_dev_destroy+0x9c/0x100 [ 251.311072] uhid_char_write+0xab9/0xf00 [ 251.311086] __vfs_write+0x105/0x6b0 [ 251.311095] ? uhid_hid_stop+0x90/0x90 [ 251.311104] ? kernel_read+0x120/0x120 18:44:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) [ 251.311115] ? __inode_security_revalidate+0xd6/0x130 [ 251.311127] ? avc_policy_seqno+0x9/0x20 [ 251.311137] ? selinux_file_permission+0x85/0x480 [ 251.311149] ? security_file_permission+0x89/0x1f0 [ 251.328617] ? rw_verify_area+0xea/0x2b0 [ 251.328631] vfs_write+0x198/0x500 [ 251.328645] SyS_write+0xfd/0x230 [ 251.328658] ? SyS_read+0x230/0x230 [ 251.328668] ? do_syscall_64+0x53/0x640 [ 251.328678] ? SyS_read+0x230/0x230 [ 251.336935] do_syscall_64+0x1e8/0x640 [ 251.336945] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 251.336962] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.336971] RIP: 0033:0x459829 [ 251.336976] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.336986] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 251.336993] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 251.346111] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 251.346117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 18:44:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400000) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 251.346123] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 251.505944] input: syz1 as /devices/virtual/input/input717 [ 251.555768] input: syz1 as /devices/virtual/input/input718 [ 251.639984] input: syz1 as /devices/virtual/input/input721 18:44:19 executing program 2 (fault-call:3 fault-nth:21): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acac03a9d344880c2b1ab5db1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd873569cf4786fc5166b0300000000001ff28d3ce3e3b8f81e34cf97c9c841cb2e962007a9a96549e3d259df17e29ed64bd6120813f9f0344e139506701e8fdedb60a69b5e4d0c67bda0"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:19 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:19 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x100) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80) bind$packet(r0, &(0x7f0000000180)={0x11, 0x4, r1, 0x1, 0x7fffffff, 0x6, @random="9a8c6fab5a71"}, 0x14) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ftruncate(r0, 0x1000) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0xfffffffffffffffb, &(0x7f0000000240)=0x2) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r2, r3) 18:44:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffdfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 251.927768] input: syz1 as /devices/virtual/input/input723 [ 251.947737] input: syz1 as /devices/virtual/input/input724 [ 251.964311] input: syz1 as /devices/virtual/input/input725 [ 251.970840] hid-generic 0000:0000:0000.0032: ignoring exceeding usage max 18:44:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 252.013653] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on sz1 [ 252.055908] FAULT_INJECTION: forcing a failure. [ 252.055908] name failslab, interval 1, probability 0, space 0, times 0 [ 252.073182] CPU: 0 PID: 12914 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 252.080297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.089690] Call Trace: [ 252.092285] dump_stack+0x138/0x19c [ 252.095915] should_fail.cold+0x10f/0x159 [ 252.100061] should_failslab+0xdb/0x130 [ 252.100074] kmem_cache_alloc_node+0x287/0x780 [ 252.100090] __alloc_skb+0x9c/0x500 [ 252.100101] ? skb_scrub_packet+0x4b0/0x4b0 [ 252.108777] ? netlink_has_listeners+0x20a/0x330 [ 252.121413] kobject_uevent_env+0x781/0xc23 [ 252.121431] kobject_uevent+0x20/0x26 [ 252.121446] device_release_driver_internal+0x443/0x540 [ 252.129517] ? hid_hw_close+0xd0/0xd0 [ 252.138637] device_release_driver+0x1a/0x20 [ 252.143031] bus_remove_device+0x2f0/0x4b0 [ 252.143044] device_del+0x3ce/0xaa0 [ 252.143057] ? lock_downgrade+0x6e0/0x6e0 [ 252.143067] ? __device_links_no_driver+0x220/0x220 [ 252.150882] hid_destroy_device+0xe4/0x160 [ 252.150894] uhid_dev_destroy+0x9c/0x100 [ 252.150904] uhid_char_write+0xab9/0xf00 [ 252.150928] __vfs_write+0x105/0x6b0 [ 252.150937] ? uhid_hid_stop+0x90/0x90 [ 252.150946] ? kernel_read+0x120/0x120 [ 252.150956] ? __inode_security_revalidate+0xd6/0x130 [ 252.150967] ? avc_policy_seqno+0x9/0x20 [ 252.150977] ? selinux_file_permission+0x85/0x480 [ 252.150987] ? security_file_permission+0x89/0x1f0 [ 252.150998] ? rw_verify_area+0xea/0x2b0 [ 252.206727] vfs_write+0x198/0x500 [ 252.210265] SyS_write+0xfd/0x230 [ 252.213693] ? SyS_read+0x230/0x230 [ 252.217296] ? do_syscall_64+0x53/0x640 [ 252.221258] ? SyS_read+0x230/0x230 [ 252.224870] do_syscall_64+0x1e8/0x640 [ 252.228731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.233553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.238715] RIP: 0033:0x459829 [ 252.241887] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.249580] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 18:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:19 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 252.256824] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 252.264071] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 252.271315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 252.278558] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 252.338663] input: syz1 as /devices/virtual/input/input730 [ 252.405440] input: syz1 as /devices/virtual/input/input732 [ 252.416774] input: syz1 as /devices/virtual/input/input734 [ 252.521675] input: syz1 as /devices/virtual/input/input735 18:44:20 executing program 2 (fault-call:3 fault-nth:22): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x101000) dup2(r0, r1) 18:44:20 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r3, 0x40049409, r1) dup2(r2, r1) 18:44:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') connect$pptp(r1, &(0x7f00000007c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000780)=r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000240)={0x49c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x702e3cd6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x12c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfff, @ipv4={[], [], @remote}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffbff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffe}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x24a}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x215}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @loopback}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a77f200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 252.790776] input: syz1 as /devices/virtual/input/input737 [ 252.798103] input: syz1 as /devices/virtual/input/input738 [ 252.818969] hid-generic 0000:0000:0000.0033: ignoring exceeding usage max [ 252.835658] input: syz1 as /devices/virtual/input/input739 [ 252.854850] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 252.887397] input: syz1 as /devices/virtual/input/input741 [ 252.905595] FAULT_INJECTION: forcing a failure. [ 252.905595] name failslab, interval 1, probability 0, space 0, times 0 [ 252.938782] CPU: 0 PID: 12972 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 252.945919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.945924] Call Trace: [ 252.945940] dump_stack+0x138/0x19c [ 252.945959] should_fail.cold+0x10f/0x159 [ 252.945974] should_failslab+0xdb/0x130 [ 252.957887] kmem_cache_alloc_node_trace+0x280/0x770 [ 252.957902] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 252.957917] __kmalloc_node_track_caller+0x3d/0x80 [ 252.957930] __kmalloc_reserve.isra.0+0x40/0xe0 [ 252.965663] __alloc_skb+0xcf/0x500 [ 252.965673] ? skb_scrub_packet+0x4b0/0x4b0 [ 252.965684] ? netlink_has_listeners+0x20a/0x330 [ 252.965698] kobject_uevent_env+0x781/0xc23 [ 252.965706] ? _raw_spin_unlock_irq+0x28/0x90 [ 252.965722] kobject_uevent+0x20/0x26 [ 252.974754] device_release_driver_internal+0x443/0x540 [ 252.974765] ? hid_hw_close+0xd0/0xd0 [ 252.974779] device_release_driver+0x1a/0x20 [ 252.974787] bus_remove_device+0x2f0/0x4b0 [ 252.974799] device_del+0x3ce/0xaa0 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.002455] ? lock_downgrade+0x6e0/0x6e0 [ 253.002467] ? __device_links_no_driver+0x220/0x220 [ 253.002484] hid_destroy_device+0xe4/0x160 [ 253.002496] uhid_dev_destroy+0x9c/0x100 [ 253.002504] uhid_char_write+0xab9/0xf00 [ 253.002518] __vfs_write+0x105/0x6b0 [ 253.011298] ? uhid_hid_stop+0x90/0x90 [ 253.011310] ? kernel_read+0x120/0x120 [ 253.011323] ? __inode_security_revalidate+0xd6/0x130 [ 253.011334] ? avc_policy_seqno+0x9/0x20 [ 253.011345] ? selinux_file_permission+0x85/0x480 [ 253.011355] ? security_file_permission+0x89/0x1f0 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.011366] ? rw_verify_area+0xea/0x2b0 [ 253.020492] vfs_write+0x198/0x500 [ 253.020506] SyS_write+0xfd/0x230 [ 253.020517] ? SyS_read+0x230/0x230 [ 253.020527] ? do_syscall_64+0x53/0x640 [ 253.020537] ? SyS_read+0x230/0x230 [ 253.020548] do_syscall_64+0x1e8/0x640 [ 253.028708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.028725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.028733] RIP: 0033:0x459829 [ 253.028739] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.028751] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 253.053948] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 253.053954] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 253.053960] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 253.053966] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:20 executing program 2 (fault-call:3 fault-nth:23): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:20 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r3, 0x40049409, r1) dup2(r2, r1) 18:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="b544deafac024aa3279247c6cf15662c896c9a81ef921422ecb2d9d5b59c2031698d2157c07cc84ababf2a3f6e218e352ee7fcf80daaab6114580d3a77f8ce66c8dfb980aeb6b94e007c019133f9130ff8442cdedc90468c1739417c5bc699fc76c87f79ae8dbf0583dc8e019584463f11eb7ed25aef3d", 0x77, 0xfffffffffffffffb) keyctl$clear(0x7, r1) 18:44:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) socketpair(0x5, 0x5, 0x172, &(0x7f0000000040)) dup2(r0, r1) 18:44:20 executing program 0: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.626153] input: syz1 as /devices/virtual/input/input749 [ 253.639246] input: syz1 as /devices/virtual/input/input750 [ 253.655830] hid-generic 0000:0000:0000.0034: ignoring exceeding usage max [ 253.689846] input: syz1 as /devices/virtual/input/input753 [ 253.718144] encrypted_key: master key parameter '1i!W|J*?n!5. aX :wf߹N' is invalid 18:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:21 executing program 0: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.735984] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on sz1 [ 253.757841] FAULT_INJECTION: forcing a failure. [ 253.757841] name failslab, interval 1, probability 0, space 0, times 0 [ 253.774861] CPU: 1 PID: 13024 Comm: syz-executor.2 Not tainted 4.14.139 #35 18:44:21 executing program 0: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.781976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.791325] Call Trace: [ 253.791344] dump_stack+0x138/0x19c [ 253.791364] should_fail.cold+0x10f/0x159 [ 253.791378] should_failslab+0xdb/0x130 [ 253.791392] kmem_cache_alloc_node+0x287/0x780 [ 253.791409] __alloc_skb+0x9c/0x500 [ 253.791418] ? skb_scrub_packet+0x4b0/0x4b0 [ 253.797603] ? netlink_has_listeners+0x20a/0x330 [ 253.797623] kobject_uevent_env+0x781/0xc23 [ 253.797640] kobject_uevent+0x20/0x26 [ 253.797654] device_release_driver_internal+0x443/0x540 [ 253.805732] ? hid_hw_close+0xd0/0xd0 18:44:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 253.805747] device_release_driver+0x1a/0x20 [ 253.805757] bus_remove_device+0x2f0/0x4b0 [ 253.805771] device_del+0x3ce/0xaa0 [ 253.805783] ? lock_downgrade+0x6e0/0x6e0 [ 253.805792] ? __device_links_no_driver+0x220/0x220 [ 253.827308] hid_destroy_device+0xe4/0x160 [ 253.827321] uhid_dev_destroy+0x9c/0x100 [ 253.827332] uhid_char_write+0xab9/0xf00 [ 253.827351] __vfs_write+0x105/0x6b0 [ 253.840259] ? uhid_hid_stop+0x90/0x90 [ 253.840273] ? kernel_read+0x120/0x120 [ 253.840285] ? __inode_security_revalidate+0xd6/0x130 [ 253.840296] ? avc_policy_seqno+0x9/0x20 [ 253.840306] ? selinux_file_permission+0x85/0x480 [ 253.840318] ? security_file_permission+0x89/0x1f0 [ 253.840329] ? rw_verify_area+0xea/0x2b0 [ 253.908397] vfs_write+0x198/0x500 [ 253.911919] SyS_write+0xfd/0x230 [ 253.915352] ? SyS_read+0x230/0x230 [ 253.918965] ? do_syscall_64+0x53/0x640 [ 253.922917] ? SyS_read+0x230/0x230 [ 253.926525] do_syscall_64+0x1e8/0x640 [ 253.930397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.935228] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.940396] RIP: 0033:0x459829 [ 253.943563] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.951246] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 253.958493] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 253.965737] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 253.972992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 253.980251] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 254.004440] input: syz1 as /devices/virtual/input/input755 [ 254.048767] encrypted_key: master key parameter '1i!W|J*?n!5. aX :wf߹N' is invalid [ 254.074785] input: syz1 as /devices/virtual/input/input756 18:44:21 executing program 2 (fault-call:3 fault-nth:24): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:21 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r3, 0x40049409, r1) dup2(r2, r1) 18:44:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x20000, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@obj_user={'obj_user', 0x3d, '[wlan1&em0()+system+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\.eth0*'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@audit='audit'}, {@fsname={'fsname', 0x3d, '/dev/uinput\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000004c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r0, r1) sync_file_range(r2, 0x5, 0x16445d41, 0x1) 18:44:21 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 254.452672] input: syz1 as /devices/virtual/input/input757 [ 254.485103] hid-generic 0000:0000:0000.0035: ignoring exceeding usage max [ 254.496464] input: syz1 as /devices/virtual/input/input758 [ 254.516025] input: syz1 as /devices/virtual/input/input761 [ 254.534451] input: syz1 as /devices/virtual/input/input760 [ 254.544755] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 254.576419] FAULT_INJECTION: forcing a failure. [ 254.576419] name failslab, interval 1, probability 0, space 0, times 0 [ 254.593630] CPU: 1 PID: 13073 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 254.600745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.610087] Call Trace: [ 254.610106] dump_stack+0x138/0x19c [ 254.610123] should_fail.cold+0x10f/0x159 [ 254.616337] should_failslab+0xdb/0x130 18:44:21 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 254.616351] kmem_cache_alloc_node_trace+0x280/0x770 [ 254.616364] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.616377] __kmalloc_node_track_caller+0x3d/0x80 [ 254.624466] __kmalloc_reserve.isra.0+0x40/0xe0 [ 254.624478] __alloc_skb+0xcf/0x500 [ 254.624488] ? skb_scrub_packet+0x4b0/0x4b0 [ 254.624499] ? netlink_has_listeners+0x20a/0x330 [ 254.624515] kobject_uevent_env+0x781/0xc23 [ 254.635154] kobject_uevent+0x20/0x26 [ 254.635168] device_release_driver_internal+0x443/0x540 [ 254.635179] ? hid_hw_close+0xd0/0xd0 18:44:21 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) 18:44:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) [ 254.635190] device_release_driver+0x1a/0x20 [ 254.635201] bus_remove_device+0x2f0/0x4b0 [ 254.657838] device_del+0x3ce/0xaa0 [ 254.657853] ? lock_downgrade+0x6e0/0x6e0 [ 254.657863] ? __device_links_no_driver+0x220/0x220 [ 254.657880] hid_destroy_device+0xe4/0x160 [ 254.657892] uhid_dev_destroy+0x9c/0x100 [ 254.679515] uhid_char_write+0xab9/0xf00 [ 254.679533] __vfs_write+0x105/0x6b0 [ 254.679544] ? uhid_hid_stop+0x90/0x90 [ 254.679554] ? kernel_read+0x120/0x120 [ 254.679569] ? __inode_security_revalidate+0xd6/0x130 [ 254.679581] ? avc_policy_seqno+0x9/0x20 [ 254.691532] ? selinux_file_permission+0x85/0x480 [ 254.691548] ? security_file_permission+0x89/0x1f0 [ 254.691568] ? rw_verify_area+0xea/0x2b0 [ 254.691579] vfs_write+0x198/0x500 [ 254.691591] SyS_write+0xfd/0x230 [ 254.725491] ? SyS_read+0x230/0x230 [ 254.725503] ? do_syscall_64+0x53/0x640 [ 254.725514] ? SyS_read+0x230/0x230 [ 254.725526] do_syscall_64+0x1e8/0x640 [ 254.725534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.725548] entry_SYSCALL_64_after_hwframe+0x42/0xb7 18:44:22 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 254.734407] RIP: 0033:0x459829 [ 254.734413] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.734423] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 254.734428] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 254.734434] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 254.734440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 254.734446] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 254.849911] input: syz1 as /devices/virtual/input/input763 [ 254.893378] input: syz1 as /devices/virtual/input/input764 18:44:22 executing program 2 (fault-call:3 fault-nth:25): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee23364b10d6aad5102000000e2a1db3c6a31e30dee4afc66d2442805201c39389a804c41c2993fc67e8a146045e14e8a0800550e6a25c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b883a36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16189cfa16cbe01a4ce411378eaab7372dab5eef84c31b3cad868a53e6f5e69746a7a0beda0686d2aa4d394286e5c81eae45e3a25b942b8da11edb578b453acac03a9d344880c2b1ab5db1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea95c3b3c6dd873569cf4786fc5166b0300000000001ff28d3ce3e3b8f81e34cf97c9c841cb2e962007a9a96549e3d259df17e29ed64bd6120813f9f0344e139506701e8fdedb60a69b5e4d0c67bda0"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 18:44:22 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:22 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x11) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2ba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdab0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe6b7}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x14) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000300)=0x8001) 18:44:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) [ 255.309942] input: syz1 as /devices/virtual/input/input765 [ 255.323562] hid-generic 0000:0000:0000.0036: ignoring exceeding usage max [ 255.342824] input: syz1 as /devices/virtual/input/input766 18:44:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x3ff, 0x7fffffff}) [ 255.371056] input: syz1 as /devices/virtual/input/input768 [ 255.378048] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on sz1 [ 255.423982] input: syz1 as /devices/virtual/input/input770 [ 255.433858] FAULT_INJECTION: forcing a failure. [ 255.433858] name failslab, interval 1, probability 0, space 0, times 0 [ 255.455695] CPU: 1 PID: 13124 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 255.462823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:44:22 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 255.472170] Call Trace: [ 255.472189] dump_stack+0x138/0x19c [ 255.472206] should_fail.cold+0x10f/0x159 [ 255.472221] should_failslab+0xdb/0x130 [ 255.472233] kmem_cache_alloc_node+0x287/0x780 [ 255.478423] __alloc_skb+0x9c/0x500 [ 255.478433] ? skb_scrub_packet+0x4b0/0x4b0 [ 255.478446] ? netlink_has_listeners+0x20a/0x330 [ 255.486535] kobject_uevent_env+0x781/0xc23 [ 255.494711] kobject_uevent+0x20/0x26 [ 255.494726] device_release_driver_internal+0x443/0x540 [ 255.503754] ? hid_hw_close+0xd0/0xd0 18:44:22 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 255.503767] device_release_driver+0x1a/0x20 [ 255.503777] bus_remove_device+0x2f0/0x4b0 [ 255.503789] device_del+0x3ce/0xaa0 [ 255.533236] ? lock_downgrade+0x6e0/0x6e0 [ 255.537387] ? __device_links_no_driver+0x220/0x220 [ 255.542409] hid_destroy_device+0xe4/0x160 [ 255.546646] uhid_dev_destroy+0x9c/0x100 [ 255.550704] uhid_char_write+0xab9/0xf00 [ 255.554770] __vfs_write+0x105/0x6b0 [ 255.558493] ? uhid_hid_stop+0x90/0x90 [ 255.562384] ? kernel_read+0x120/0x120 [ 255.566269] ? __inode_security_revalidate+0xd6/0x130 18:44:22 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 255.571460] ? avc_policy_seqno+0x9/0x20 [ 255.575530] ? selinux_file_permission+0x85/0x480 [ 255.580381] ? security_file_permission+0x89/0x1f0 [ 255.585312] ? rw_verify_area+0xea/0x2b0 [ 255.589377] vfs_write+0x198/0x500 [ 255.592923] SyS_write+0xfd/0x230 [ 255.596373] ? SyS_read+0x230/0x230 [ 255.599988] ? do_syscall_64+0x53/0x640 [ 255.603943] ? SyS_read+0x230/0x230 [ 255.607550] do_syscall_64+0x1e8/0x640 [ 255.611415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.616249] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.621416] RIP: 0033:0x459829 18:44:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x0, 0x7fffffff}) [ 255.624580] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.632264] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 255.639528] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 255.646798] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 255.654060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 255.661308] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 255.683195] input: syz1 as /devices/virtual/input/input772 18:44:23 executing program 2 (fault-call:3 fault-nth:26): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3b, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x80, @ipv4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:23 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)) 18:44:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) [ 256.137602] input: syz1 as /devices/virtual/input/input774 [ 256.166793] input: syz1 as /devices/virtual/input/input775 [ 256.180975] input: syz1 as /devices/virtual/input/input776 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 256.198350] hid-generic 0000:0000:0000.0037: ignoring exceeding usage max [ 256.230245] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on sz1 [ 256.266704] input: syz1 as /devices/virtual/input/input778 [ 256.287707] FAULT_INJECTION: forcing a failure. [ 256.287707] name failslab, interval 1, probability 0, space 0, times 0 [ 256.302194] CPU: 1 PID: 13179 Comm: syz-executor.2 Not tainted 4.14.139 #35 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 256.309334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.309343] Call Trace: [ 256.321269] dump_stack+0x138/0x19c [ 256.321287] should_fail.cold+0x10f/0x159 [ 256.321300] should_failslab+0xdb/0x130 [ 256.321312] kmem_cache_alloc_node_trace+0x280/0x770 [ 256.321327] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 256.329073] __kmalloc_node_track_caller+0x3d/0x80 [ 256.329087] __kmalloc_reserve.isra.0+0x40/0xe0 [ 256.329097] __alloc_skb+0xcf/0x500 [ 256.329108] ? skb_scrub_packet+0x4b0/0x4b0 [ 256.361069] ? netlink_has_listeners+0x20a/0x330 [ 256.365830] kobject_uevent_env+0x781/0xc23 [ 256.370161] kobject_uevent+0x20/0x26 [ 256.370174] device_release_driver_internal+0x443/0x540 [ 256.370183] ? hid_hw_close+0xd0/0xd0 [ 256.370193] device_release_driver+0x1a/0x20 [ 256.370203] bus_remove_device+0x2f0/0x4b0 [ 256.379334] device_del+0x3ce/0xaa0 [ 256.379348] ? lock_downgrade+0x6e0/0x6e0 [ 256.379357] ? __device_links_no_driver+0x220/0x220 [ 256.379371] hid_destroy_device+0xe4/0x160 [ 256.408734] uhid_dev_destroy+0x9c/0x100 [ 256.412797] uhid_char_write+0xab9/0xf00 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 256.416864] __vfs_write+0x105/0x6b0 [ 256.420574] ? uhid_hid_stop+0x90/0x90 [ 256.424462] ? kernel_read+0x120/0x120 [ 256.428348] ? __inode_security_revalidate+0xd6/0x130 [ 256.433538] ? avc_policy_seqno+0x9/0x20 [ 256.437598] ? selinux_file_permission+0x85/0x480 [ 256.442448] ? security_file_permission+0x89/0x1f0 [ 256.447378] ? rw_verify_area+0xea/0x2b0 [ 256.451439] vfs_write+0x198/0x500 [ 256.454988] SyS_write+0xfd/0x230 [ 256.458444] ? SyS_read+0x230/0x230 [ 256.462071] ? do_syscall_64+0x53/0x640 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 256.466045] ? SyS_read+0x230/0x230 [ 256.469674] do_syscall_64+0x1e8/0x640 [ 256.473557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.478403] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.483586] RIP: 0033:0x459829 [ 256.486770] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.494476] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 256.501744] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 256.509012] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 256.516276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 256.523543] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 256.534152] input: syz1 as /devices/virtual/input/input779 18:44:24 executing program 2 (fault-call:3 fault-nth:27): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:24 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x80]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x9, 0x7e35, 0x6001, 0x7, 0x1, 0x4, 0x2, 0x7}}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x40000) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)=0x100) 18:44:24 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000fc0)=""/4096) [ 257.028747] input: syz1 as /devices/virtual/input/input780 [ 257.046172] input: syz1 as /devices/virtual/input/input781 [ 257.055544] hid-generic 0000:0000:0000.0038: ignoring exceeding usage max [ 257.067817] input: syz1 as /devices/virtual/input/input782 [ 257.093402] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on sz1 [ 257.105520] FAULT_INJECTION: forcing a failure. [ 257.105520] name failslab, interval 1, probability 0, space 0, times 0 [ 257.117054] CPU: 1 PID: 13234 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 257.124161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.124167] Call Trace: [ 257.124182] dump_stack+0x138/0x19c [ 257.124199] should_fail.cold+0x10f/0x159 [ 257.143891] should_failslab+0xdb/0x130 [ 257.147879] kmem_cache_alloc_node+0x287/0x780 [ 257.152471] __alloc_skb+0x9c/0x500 [ 257.152481] ? skb_scrub_packet+0x4b0/0x4b0 [ 257.152492] ? netlink_has_listeners+0x20a/0x330 [ 257.152509] kobject_uevent_env+0x781/0xc23 [ 257.169497] kobject_uevent+0x20/0x26 [ 257.173288] device_release_driver_internal+0x443/0x540 [ 257.178645] ? hid_hw_close+0xd0/0xd0 [ 257.182435] device_release_driver+0x1a/0x20 [ 257.186830] bus_remove_device+0x2f0/0x4b0 [ 257.191051] device_del+0x3ce/0xaa0 [ 257.194874] ? lock_downgrade+0x6e0/0x6e0 [ 257.199075] ? __device_links_no_driver+0x220/0x220 [ 257.204080] hid_destroy_device+0xe4/0x160 [ 257.208386] uhid_dev_destroy+0x9c/0x100 [ 257.212433] uhid_char_write+0xab9/0xf00 [ 257.216481] __vfs_write+0x105/0x6b0 [ 257.220182] ? uhid_hid_stop+0x90/0x90 [ 257.224052] ? kernel_read+0x120/0x120 [ 257.227925] ? __inode_security_revalidate+0xd6/0x130 [ 257.233103] ? avc_policy_seqno+0x9/0x20 [ 257.237239] ? selinux_file_permission+0x85/0x480 [ 257.242071] ? security_file_permission+0x89/0x1f0 [ 257.246989] ? rw_verify_area+0xea/0x2b0 [ 257.251036] vfs_write+0x198/0x500 [ 257.254568] SyS_write+0xfd/0x230 [ 257.258009] ? SyS_read+0x230/0x230 [ 257.261630] ? do_syscall_64+0x53/0x640 [ 257.265602] ? SyS_read+0x230/0x230 [ 257.269215] do_syscall_64+0x1e8/0x640 [ 257.273156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.278043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.283260] RIP: 0033:0x459829 [ 257.286436] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:44:24 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 257.294142] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 257.301399] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 257.308658] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 257.316003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 257.323262] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 257.339721] input: syz1 as /devices/virtual/input/input783 18:44:24 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:24 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:24 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x9, 0x3, 0x20000000000000, 0x400, 0x0, 0x5, 0x4000, 0x5, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0xffffffff, 0x10000, 0x80000000, 0x39f6, 0xfffffffffffffffc, 0x7, 0x800, 0x3f, 0x9, 0xe62, 0x87f0, 0x2, 0x1, 0x20, 0x0, 0x101, 0x5, 0x3f, 0xf0d9, 0x1, 0x3, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x20000, 0xb2, 0x2, 0x9, 0x20, 0x1, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast=0xac141424}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x614b, 0x210800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000140)={0x1000, 0x0, 0x301e, 0x4, 0x0, {0x40000000000000, 0x3}, 0x1}) [ 257.437028] input: syz1 as /devices/virtual/input/input784 18:44:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20001) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) syncfs(r0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 18:44:24 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 257.519645] input: syz1 as /devices/virtual/input/input786 [ 257.568593] input: syz1 as /devices/virtual/input/input787 [ 257.649304] input: syz1 as /devices/virtual/input/input788 18:44:25 executing program 2 (fault-call:3 fault-nth:28): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:25 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f00000000c0)=""/138) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fcntl$addseals(r0, 0x409, 0x8) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 257.865026] input: syz1 as /devices/virtual/input/input790 [ 257.885655] input: syz1 as /devices/virtual/input/input791 [ 257.897952] hid-generic 0000:0000:0000.0039: ignoring exceeding usage max 18:44:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x1000, 0x24a001) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x2) dup2(r0, r1) [ 257.926162] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on sz1 [ 257.947634] input: syz1 as /devices/virtual/input/input792 [ 257.969143] FAULT_INJECTION: forcing a failure. [ 257.969143] name failslab, interval 1, probability 0, space 0, times 0 [ 257.981597] CPU: 0 PID: 13294 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 257.988726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.998079] Call Trace: [ 257.998097] dump_stack+0x138/0x19c [ 257.998114] should_fail.cold+0x10f/0x159 [ 257.998130] should_failslab+0xdb/0x130 [ 258.008472] kmem_cache_alloc_node_trace+0x280/0x770 [ 258.008487] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.008500] __kmalloc_node_track_caller+0x3d/0x80 [ 258.017561] __kmalloc_reserve.isra.0+0x40/0xe0 [ 258.017573] __alloc_skb+0xcf/0x500 [ 258.017583] ? skb_scrub_packet+0x4b0/0x4b0 [ 258.017594] ? netlink_has_listeners+0x20a/0x330 [ 258.017608] kobject_uevent_env+0x781/0xc23 [ 258.032632] kobject_uevent+0x20/0x26 [ 258.032646] device_release_driver_internal+0x443/0x540 [ 258.032656] ? hid_hw_close+0xd0/0xd0 [ 258.032667] device_release_driver+0x1a/0x20 [ 258.032676] bus_remove_device+0x2f0/0x4b0 [ 258.032687] device_del+0x3ce/0xaa0 [ 258.032699] ? lock_downgrade+0x6e0/0x6e0 [ 258.032711] ? __device_links_no_driver+0x220/0x220 [ 258.040643] hid_destroy_device+0xe4/0x160 [ 258.040656] uhid_dev_destroy+0x9c/0x100 [ 258.040667] uhid_char_write+0xab9/0xf00 [ 258.040681] __vfs_write+0x105/0x6b0 [ 258.040691] ? uhid_hid_stop+0x90/0x90 [ 258.040700] ? kernel_read+0x120/0x120 [ 258.040711] ? __inode_security_revalidate+0xd6/0x130 [ 258.040722] ? avc_policy_seqno+0x9/0x20 [ 258.040733] ? selinux_file_permission+0x85/0x480 [ 258.040745] ? security_file_permission+0x89/0x1f0 [ 258.040757] ? rw_verify_area+0xea/0x2b0 [ 258.040769] vfs_write+0x198/0x500 [ 258.134591] SyS_write+0xfd/0x230 [ 258.138046] ? SyS_read+0x230/0x230 [ 258.141683] ? do_syscall_64+0x53/0x640 [ 258.145653] ? SyS_read+0x230/0x230 [ 258.149267] do_syscall_64+0x1e8/0x640 [ 258.153147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.157979] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.163160] RIP: 0033:0x459829 [ 258.166349] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.174051] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 258.181318] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 258.188580] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 258.195837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 258.203104] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 258.211808] input: syz1 as /devices/virtual/input/input793 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:25 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 258.338799] input: syz1 as /devices/virtual/input/input794 18:44:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000fc0)=""/4096) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000000c0)={0x10}) dup2(r0, r1) [ 258.383420] input: syz1 as /devices/virtual/input/input796 [ 258.406964] input: syz1 as /devices/virtual/input/input797 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 258.467968] input: syz1 as /devices/virtual/input/input798 [ 258.582908] input: syz1 as /devices/virtual/input/input799 18:44:25 executing program 2 (fault-call:3 fault-nth:29): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40003, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048091) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:25 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:25 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) r2 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r2, 0x4, &(0x7f0000000040)) [ 258.690354] input: syz1 as /devices/virtual/input/input800 [ 258.700135] hid-generic 0000:0000:0000.003A: ignoring exceeding usage max [ 258.725240] input: syz1 as /devices/virtual/input/input801 [ 258.745454] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on sz1 [ 258.783375] input: syz1 as /devices/virtual/input/input802 [ 258.802036] FAULT_INJECTION: forcing a failure. [ 258.802036] name failslab, interval 1, probability 0, space 0, times 0 [ 258.816537] CPU: 0 PID: 13354 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 258.823740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.823745] Call Trace: [ 258.823763] dump_stack+0x138/0x19c [ 258.823781] should_fail.cold+0x10f/0x159 [ 258.823794] should_failslab+0xdb/0x130 [ 258.847700] kmem_cache_alloc_node+0x287/0x780 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 258.847720] __alloc_skb+0x9c/0x500 [ 258.847728] ? skb_scrub_packet+0x4b0/0x4b0 [ 258.847740] ? netlink_has_listeners+0x20a/0x330 [ 258.864998] kobject_uevent_env+0x781/0xc23 [ 258.869340] kobject_uevent+0x20/0x26 [ 258.873149] device_release_driver_internal+0x443/0x540 [ 258.878564] ? hid_hw_close+0xd0/0xd0 [ 258.882352] device_release_driver+0x1a/0x20 [ 258.886746] bus_remove_device+0x2f0/0x4b0 [ 258.890980] device_del+0x3ce/0xaa0 [ 258.894603] ? lock_downgrade+0x6e0/0x6e0 [ 258.898835] ? __device_links_no_driver+0x220/0x220 [ 258.903854] hid_destroy_device+0xe4/0x160 [ 258.908085] uhid_dev_destroy+0x9c/0x100 [ 258.912140] uhid_char_write+0xab9/0xf00 [ 258.916205] __vfs_write+0x105/0x6b0 [ 258.919908] ? uhid_hid_stop+0x90/0x90 [ 258.923781] ? kernel_read+0x120/0x120 [ 258.927653] ? __inode_security_revalidate+0xd6/0x130 [ 258.932843] ? avc_policy_seqno+0x9/0x20 [ 258.936901] ? selinux_file_permission+0x85/0x480 [ 258.941733] ? security_file_permission+0x89/0x1f0 [ 258.946655] ? rw_verify_area+0xea/0x2b0 [ 258.950713] vfs_write+0x198/0x500 [ 258.954249] SyS_write+0xfd/0x230 [ 258.957844] ? SyS_read+0x230/0x230 [ 258.961552] ? do_syscall_64+0x53/0x640 [ 258.965607] ? SyS_read+0x230/0x230 [ 258.969243] do_syscall_64+0x1e8/0x640 [ 258.973131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.977973] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.983148] RIP: 0033:0x459829 [ 258.986321] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.994023] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 259.001462] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 259.008833] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 259.016087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 259.023341] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 259.036586] input: syz1 as /devices/virtual/input/input803 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3131], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) sysfs$3(0x3) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x16b882) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) connect$rose(r1, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x410042, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 18:44:26 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 259.112579] input: syz1 as /devices/virtual/input/input804 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000500)={r2, 0x7f, 0x9, [0x5, 0xfffffffffffffff8, 0x3, 0x3, 0x0, 0x7, 0x1, 0xffffffffffffff80, 0x4]}, &(0x7f0000000540)=0x1a) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x10000, 0x6, 0xfffffffffffeffff, 0x7d, 0x0, [{0xfffffffffffffffa, 0x2, 0x9fa, [], 0x5}, {0x93, 0x5, 0x8, [], 0x523c5244}, {0x5, 0xa5, 0x3f, [], 0x6}, {0x7, 0x4, 0xbc83, [], 0xfff}, {0x2, 0x80, 0x3f, [], 0x6}, {0xfffffffffffffffb, 0x8, 0xa68, [], 0x6}, {0x8, 0x100000000, 0x82, [], 0x9}, {0x7, 0x0, 0x8000, [], 0x20}, {0x732838aa, 0x2, 0x7, [], 0x3f}, {0x40, 0x3fffffff8000000, 0x6, [], 0x7}, {0x2, 0x5c60, 0x9, [], 0x6}, {0x9, 0x5, 0x80, [], 0x5}, {0x9, 0xd98d, 0x8, [], 0x9}, {0x7ff, 0x9, 0x5, [], 0xfff}, {0x9, 0x180, 0x1, [], 0xff}, {0x200, 0x8001, 0x0, [], 0x5}, {0xffffffff00000000, 0x10001, 0x8, [], 0x80}, {0x8001, 0xf4, 0xfff}, {0x8000, 0xffff, 0xdd, [], 0x6}, {0xffffffffffffffff, 0x0, 0x3a, [], 0x1}, {0x6, 0x7d, 0x3, [], 0x7}, {0x400, 0x1f, 0x7}, {0x4f, 0x80000000, 0x7}, {0x82, 0xffff, 0xfff, [], 0xfffffffffffffffe}]}}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000001c0)=0x8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000300)=""/198) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x40, 0x9, 0xc, 0x0, 0x5, 0x1, 0x9, 0x1ff, r5}, &(0x7f0000000240)=0x20) dup2(r0, r3) [ 259.182821] input: syz1 as /devices/virtual/input/input806 [ 259.221432] input: syz1 as /devices/virtual/input/input805 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 259.258549] input: syz1 as /devices/virtual/input/input807 [ 259.412701] input: syz1 as /devices/virtual/input/input808 18:44:26 executing program 2 (fault-call:3 fault-nth:30): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:26 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:26 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) socketpair(0xa, 0x1, 0x843b, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), 0x4) dup2(r0, r1) [ 259.521381] hid-generic 0000:0000:0000.003B: ignoring exceeding usage max [ 259.533281] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on sz1 [ 259.547641] input: syz1 as /devices/virtual/input/input809 18:44:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x9, 0x3, 0x20000000000000, 0x400, 0x0, 0x5, 0x4000, 0x5, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0xffffffff, 0x10000, 0x80000000, 0x39f6, 0xfffffffffffffffc, 0x7, 0x800, 0x3f, 0x9, 0xe62, 0x87f0, 0x2, 0x1, 0x20, 0x0, 0x101, 0x5, 0x3f, 0xf0d9, 0x1, 0x3, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x20000, 0xb2, 0x2, 0x9, 0x20, 0x1, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast=0xac141424}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x614b, 0x210800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000140)={0x1000, 0x0, 0x301e, 0x4, 0x0, {0x40000000000000, 0x3}, 0x1}) [ 259.587106] FAULT_INJECTION: forcing a failure. [ 259.587106] name failslab, interval 1, probability 0, space 0, times 0 [ 259.616912] CPU: 1 PID: 13413 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 259.624208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.633571] Call Trace: [ 259.636168] dump_stack+0x138/0x19c [ 259.636188] should_fail.cold+0x10f/0x159 [ 259.636204] should_failslab+0xdb/0x130 [ 259.636220] kmem_cache_alloc_node_trace+0x280/0x770 [ 259.643985] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.644004] __kmalloc_node_track_caller+0x3d/0x80 [ 259.644016] __kmalloc_reserve.isra.0+0x40/0xe0 [ 259.644028] __alloc_skb+0xcf/0x500 [ 259.653085] ? skb_scrub_packet+0x4b0/0x4b0 [ 259.653098] ? netlink_has_listeners+0x20a/0x330 [ 259.653112] kobject_uevent_env+0x781/0xc23 [ 259.653130] kobject_uevent+0x20/0x26 [ 259.653142] device_release_driver_internal+0x443/0x540 [ 259.653151] ? hid_hw_close+0xd0/0xd0 [ 259.653162] device_release_driver+0x1a/0x20 [ 259.653170] bus_remove_device+0x2f0/0x4b0 [ 259.653181] device_del+0x3ce/0xaa0 [ 259.663550] ? lock_downgrade+0x6e0/0x6e0 [ 259.663563] ? __device_links_no_driver+0x220/0x220 [ 259.663579] hid_destroy_device+0xe4/0x160 [ 259.663590] uhid_dev_destroy+0x9c/0x100 [ 259.663599] uhid_char_write+0xab9/0xf00 [ 259.663612] __vfs_write+0x105/0x6b0 [ 259.663621] ? uhid_hid_stop+0x90/0x90 [ 259.663631] ? kernel_read+0x120/0x120 [ 259.743695] ? __inode_security_revalidate+0xd6/0x130 [ 259.749004] ? avc_policy_seqno+0x9/0x20 [ 259.753057] ? selinux_file_permission+0x85/0x480 [ 259.757897] ? security_file_permission+0x89/0x1f0 [ 259.762818] ? rw_verify_area+0xea/0x2b0 [ 259.766874] vfs_write+0x198/0x500 [ 259.770403] SyS_write+0xfd/0x230 [ 259.773931] ? SyS_read+0x230/0x230 [ 259.777557] ? do_syscall_64+0x53/0x640 [ 259.781523] ? SyS_read+0x230/0x230 [ 259.785144] do_syscall_64+0x1e8/0x640 [ 259.789112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.793942] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.799118] RIP: 0033:0x459829 [ 259.802298] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.810213] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 259.817480] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 259.824824] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 259.832079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 259.839333] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 259.849914] input: syz1 as /devices/virtual/input/input811 18:44:27 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 259.923620] input: syz1 as /devices/virtual/input/input812 18:44:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r2, 0xff, "045c26", "1ccedf003b864244b2d60598d48d59215e7bb35857d7a788c41cdc23dd88a4edb0b97037eeb0fc580c27a63a7bfd97a6ad032dd1a925a39c124419867516ce35dc598cc3202ab0b57ba331d0662ca390cf9916a28299184af369578513bc975337af6ef963a9946755ba43efb06855fe63ec491bdf2084ed8336ac758ee2800d0c4e2276fd5c5ad9e75b78e5b1479c72ad926c33605d890768859c55fffcb7c4e280d98651c7cb038c1e56a777e78670d91d11a5953b27709d4c4c85a9b3631398ebc66b12e3e44a5c7866411276776e2d2ce0800478ce3982874939a2d02850e95f83b6870121cc5f18142b39f2b0cfa546b4d2a8e1b9727f3186cead9c200d"}}, 0x110) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x9, 0x3, 0x20000000000000, 0x400, 0x0, 0x5, 0x4000, 0x5, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0xffffffff, 0x10000, 0x80000000, 0x39f6, 0xfffffffffffffffc, 0x7, 0x800, 0x3f, 0x9, 0xe62, 0x87f0, 0x2, 0x1, 0x20, 0x0, 0x101, 0x5, 0x3f, 0xf0d9, 0x1, 0x3, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x20000, 0xb2, 0x2, 0x9, 0x20, 0x1, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x2) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast=0xac141424}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x614b, 0x210800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000140)={0x1000, 0x0, 0x301e, 0x4, 0x0, {0x40000000000000, 0x3}, 0x1}) 18:44:27 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = dup2(r0, r1) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000000c0)=""/173) 18:44:27 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 260.061381] input: syz1 as /devices/virtual/input/input813 [ 260.068581] input: syz1 as /devices/virtual/input/input814 [ 260.084424] input: syz1 as /devices/virtual/input/input816 [ 260.108257] input: syz1 as /devices/virtual/input/input815 18:44:27 executing program 2 (fault-call:3 fault-nth:31): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:27 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:27 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') 18:44:27 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40) ioctl$KDADDIO(r0, 0x4b34, 0x100000000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:27 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0xffffffff}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) capget(&(0x7f00000001c0)={0x20071026, r3}, &(0x7f0000000200)={0xffc0000000000000, 0xc044, 0x2, 0xa9, 0x1e32000000}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) dup2(r0, r1) [ 260.355968] hid-generic 0000:0000:0000.003C: ignoring exceeding usage max [ 260.367806] input: syz1 as /devices/virtual/input/input819 [ 260.389108] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:27 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, 0x0) [ 260.415417] input: syz1 as /devices/virtual/input/input820 [ 260.453853] input: syz1 as /devices/virtual/input/input821 18:44:27 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 260.475329] FAULT_INJECTION: forcing a failure. [ 260.475329] name failslab, interval 1, probability 0, space 0, times 0 [ 260.509519] CPU: 0 PID: 13484 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 260.516832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.526328] Call Trace: [ 260.528931] dump_stack+0x138/0x19c [ 260.532566] should_fail.cold+0x10f/0x159 [ 260.532586] should_failslab+0xdb/0x130 [ 260.532600] kmem_cache_alloc_node+0x287/0x780 [ 260.532618] __alloc_skb+0x9c/0x500 [ 260.532627] ? skb_scrub_packet+0x4b0/0x4b0 [ 260.532640] ? netlink_has_listeners+0x20a/0x330 [ 260.532656] kobject_uevent_env+0x781/0xc23 [ 260.532674] kobject_uevent+0x20/0x26 [ 260.532685] device_release_driver_internal+0x443/0x540 [ 260.532696] ? hid_hw_close+0xd0/0xd0 [ 260.552639] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 260.553347] device_release_driver+0x1a/0x20 [ 260.553358] bus_remove_device+0x2f0/0x4b0 [ 260.553370] device_del+0x3ce/0xaa0 [ 260.553383] ? lock_downgrade+0x6e0/0x6e0 [ 260.601920] ? __device_links_no_driver+0x220/0x220 [ 260.606950] hid_destroy_device+0xe4/0x160 [ 260.611181] uhid_dev_destroy+0x9c/0x100 [ 260.615228] uhid_char_write+0xab9/0xf00 [ 260.619290] __vfs_write+0x105/0x6b0 [ 260.623010] ? uhid_hid_stop+0x90/0x90 [ 260.627010] ? kernel_read+0x120/0x120 [ 260.630891] ? __inode_security_revalidate+0xd6/0x130 [ 260.636069] ? avc_policy_seqno+0x9/0x20 [ 260.640128] ? selinux_file_permission+0x85/0x480 [ 260.646481] ? security_file_permission+0x89/0x1f0 [ 260.651402] ? rw_verify_area+0xea/0x2b0 [ 260.655459] vfs_write+0x198/0x500 [ 260.658997] SyS_write+0xfd/0x230 [ 260.662450] ? SyS_read+0x230/0x230 [ 260.666179] ? do_syscall_64+0x53/0x640 [ 260.670148] ? SyS_read+0x230/0x230 [ 260.673773] do_syscall_64+0x1e8/0x640 [ 260.677655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.687715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.696346] RIP: 0033:0x459829 [ 260.699525] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.707473] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 260.714731] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:28 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, 0x0) 18:44:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000fc0)=""/4096) [ 260.721997] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 260.729264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 260.736520] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 260.745152] input: syz1 as /devices/virtual/input/input822 18:44:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:28 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 260.841568] input: syz1 as /devices/virtual/input/input823 [ 260.886520] input: syz1 as /devices/virtual/input/input824 [ 260.906082] input: syz1 as /devices/virtual/input/input825 [ 260.942602] input: syz1 as /devices/virtual/input/input826 [ 260.992893] input: syz1 as /devices/virtual/input/input827 18:44:28 executing program 2 (fault-call:3 fault-nth:32): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:28 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, 0x0) 18:44:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372]}, 0x45c) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)={0x0, @speck128, 0x2, "ee6b5c27d467c695"}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x356, 0x20, 0x9}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:44:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3b, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x80, @ipv4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:28 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 261.181829] input: syz1 as /devices/virtual/input/input828 [ 261.189706] input: syz1 as /devices/virtual/input/input829 [ 261.199060] hid-generic 0000:0000:0000.003D: ignoring exceeding usage max [ 261.219542] input: syz1 as /devices/virtual/input/input830 [ 261.220504] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on sz1 [ 261.240289] input: syz1 as /devices/virtual/input/input831 [ 261.272918] FAULT_INJECTION: forcing a failure. [ 261.272918] name failslab, interval 1, probability 0, space 0, times 0 [ 261.305454] CPU: 1 PID: 13552 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 261.312700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.322059] Call Trace: [ 261.324738] dump_stack+0x138/0x19c [ 261.328572] should_fail.cold+0x10f/0x159 [ 261.332800] should_failslab+0xdb/0x130 [ 261.336764] kmem_cache_alloc_node_trace+0x280/0x770 [ 261.341945] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 261.347386] __kmalloc_node_track_caller+0x3d/0x80 [ 261.352316] __kmalloc_reserve.isra.0+0x40/0xe0 [ 261.356969] __alloc_skb+0xcf/0x500 [ 261.360582] ? skb_scrub_packet+0x4b0/0x4b0 [ 261.364891] ? netlink_has_listeners+0x20a/0x330 [ 261.369635] kobject_uevent_env+0x781/0xc23 [ 261.374077] kobject_uevent+0x20/0x26 [ 261.377868] device_release_driver_internal+0x443/0x540 [ 261.383215] ? hid_hw_close+0xd0/0xd0 [ 261.387074] device_release_driver+0x1a/0x20 [ 261.391469] bus_remove_device+0x2f0/0x4b0 [ 261.395711] device_del+0x3ce/0xaa0 [ 261.399334] ? lock_downgrade+0x6e0/0x6e0 [ 261.403472] ? __device_links_no_driver+0x220/0x220 [ 261.408578] hid_destroy_device+0xe4/0x160 [ 261.412799] uhid_dev_destroy+0x9c/0x100 [ 261.416846] uhid_char_write+0xab9/0xf00 [ 261.420985] __vfs_write+0x105/0x6b0 [ 261.424684] ? uhid_hid_stop+0x90/0x90 [ 261.428763] ? kernel_read+0x120/0x120 [ 261.432711] ? __inode_security_revalidate+0xd6/0x130 [ 261.437888] ? avc_policy_seqno+0x9/0x20 [ 261.441943] ? selinux_file_permission+0x85/0x480 [ 261.446782] ? security_file_permission+0x89/0x1f0 [ 261.451778] ? rw_verify_area+0xea/0x2b0 [ 261.455828] vfs_write+0x198/0x500 [ 261.459353] SyS_write+0xfd/0x230 [ 261.462793] ? SyS_read+0x230/0x230 [ 261.466406] ? do_syscall_64+0x53/0x640 [ 261.470438] ? SyS_read+0x230/0x230 [ 261.474201] do_syscall_64+0x1e8/0x640 [ 261.478074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.482905] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.488082] RIP: 0033:0x459829 [ 261.491260] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.498962] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 261.506220] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 261.513560] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 261.520814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 261.528125] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:28 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 261.574313] input: syz1 as /devices/virtual/input/input832 18:44:28 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000fc0)=""/4096) 18:44:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 261.675774] input: syz1 as /devices/virtual/input/input833 [ 261.700634] input: syz1 as /devices/virtual/input/input834 [ 261.715056] input: syz1 as /devices/virtual/input/input835 [ 261.740530] input: syz1 as /devices/virtual/input/input836 [ 261.753321] input: syz1 as /devices/virtual/input/input837 18:44:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) [ 261.833833] input: syz1 as /devices/virtual/input/input838 18:44:29 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 261.924275] input: syz1 as /devices/virtual/input/input839 18:44:29 executing program 2 (fault-call:3 fault-nth:33): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x8, 0x3, 0x4}}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:29 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) accept4$netrom(r1, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 261.970232] input: syz1 as /devices/virtual/input/input840 18:44:29 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 262.027487] input: syz1 as /devices/virtual/input/input842 [ 262.047651] hid-generic 0000:0000:0000.003E: ignoring exceeding usage max [ 262.069805] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:29 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) [ 262.106432] input: syz1 as /devices/virtual/input/input843 [ 262.114235] FAULT_INJECTION: forcing a failure. [ 262.114235] name failslab, interval 1, probability 0, space 0, times 0 [ 262.149550] CPU: 0 PID: 13607 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 262.156685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.166039] Call Trace: [ 262.168624] dump_stack+0x138/0x19c [ 262.172254] should_fail.cold+0x10f/0x159 [ 262.172272] should_failslab+0xdb/0x130 [ 262.172285] kmem_cache_alloc_trace+0x2e9/0x790 [ 262.172297] ? lock_downgrade+0x6e0/0x6e0 [ 262.189215] ? devm_device_remove_groups+0x50/0x50 [ 262.194158] kobject_uevent_env+0x378/0xc23 [ 262.198493] ? wait_for_completion+0x420/0x420 [ 262.203090] kobject_uevent+0x20/0x26 [ 262.206901] device_del+0x65c/0xaa0 [ 262.210545] ? __device_links_no_driver+0x220/0x220 [ 262.215575] hid_destroy_device+0xe4/0x160 [ 262.219827] uhid_dev_destroy+0x9c/0x100 [ 262.223898] uhid_char_write+0xab9/0xf00 [ 262.227976] __vfs_write+0x105/0x6b0 [ 262.231698] ? uhid_hid_stop+0x90/0x90 [ 262.235597] ? kernel_read+0x120/0x120 [ 262.239492] ? __inode_security_revalidate+0xd6/0x130 [ 262.239506] ? avc_policy_seqno+0x9/0x20 18:44:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) [ 262.239517] ? selinux_file_permission+0x85/0x480 [ 262.239528] ? security_file_permission+0x89/0x1f0 [ 262.239540] ? rw_verify_area+0xea/0x2b0 [ 262.248767] vfs_write+0x198/0x500 [ 262.248781] SyS_write+0xfd/0x230 [ 262.248793] ? SyS_read+0x230/0x230 [ 262.248803] ? do_syscall_64+0x53/0x640 [ 262.248812] ? SyS_read+0x230/0x230 [ 262.262620] do_syscall_64+0x1e8/0x640 [ 262.262630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.262647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.262654] RIP: 0033:0x459829 18:44:29 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 262.262660] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.262670] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 262.262675] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 262.262680] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 262.262686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 262.262693] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) dup2(r0, r1) [ 262.352119] input: syz1 as /devices/virtual/input/input846 [ 262.387911] input: syz1 as /devices/virtual/input/input847 18:44:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2c8004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='/dev/uinput\x00', r1}, 0x10) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000200)={0x4, 0x2, {0x3, 0x3, 0x1, 0x2, 0x5c6}}) [ 262.476435] input: syz1 as /devices/virtual/input/input849 [ 262.499365] input: syz1 as /devices/virtual/input/input850 [ 262.512541] input: syz1 as /devices/virtual/input/input851 [ 262.692746] input: syz1 as /devices/virtual/input/input854 18:44:30 executing program 2 (fault-call:3 fault-nth:34): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:30 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x220800, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfff, 0x400000) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}, 0x32) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x7fff}) 18:44:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) fcntl$setsig(r0, 0xa, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) 18:44:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffc, 0x80) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) [ 262.878833] input: syz1 as /devices/virtual/input/input855 [ 262.886603] input: syz1 as /devices/virtual/input/input857 [ 262.895768] input: syz1 as /devices/virtual/input/input856 [ 262.929071] hid-generic 0000:0000:0000.003F: ignoring exceeding usage max [ 262.948011] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:30 executing program 0: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)=""/233, &(0x7f0000000240)=0xe9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)='/dev/input/event#\x00'}, 0x30) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000380)) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r3) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 18:44:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x0, 0x2}}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) [ 262.975967] input: syz1 as /devices/virtual/input/input859 [ 262.993592] input: syz1 as /devices/virtual/input/input860 [ 263.011846] FAULT_INJECTION: forcing a failure. [ 263.011846] name failslab, interval 1, probability 0, space 0, times 0 [ 263.049644] CPU: 1 PID: 13687 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 263.056790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.066246] Call Trace: [ 263.066265] dump_stack+0x138/0x19c [ 263.066284] should_fail.cold+0x10f/0x159 [ 263.066301] should_failslab+0xdb/0x130 [ 263.066315] kmem_cache_alloc_node_trace+0x280/0x770 [ 263.066328] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 263.066341] __kmalloc_node_track_caller+0x3d/0x80 [ 263.066354] __kmalloc_reserve.isra.0+0x40/0xe0 [ 263.066366] __alloc_skb+0xcf/0x500 [ 263.066375] ? skb_scrub_packet+0x4b0/0x4b0 [ 263.066385] ? netlink_has_listeners+0x20a/0x330 [ 263.066397] kobject_uevent_env+0x781/0xc23 [ 263.076757] kobject_uevent+0x20/0x26 [ 263.076772] device_release_driver_internal+0x443/0x540 [ 263.076783] ? hid_hw_close+0xd0/0xd0 [ 263.076797] device_release_driver+0x1a/0x20 [ 263.085856] bus_remove_device+0x2f0/0x4b0 [ 263.085871] device_del+0x3ce/0xaa0 [ 263.085884] ? lock_downgrade+0x6e0/0x6e0 [ 263.085894] ? __device_links_no_driver+0x220/0x220 [ 263.085912] hid_destroy_device+0xe4/0x160 [ 263.104638] uhid_dev_destroy+0x9c/0x100 [ 263.104651] uhid_char_write+0xab9/0xf00 [ 263.104667] __vfs_write+0x105/0x6b0 [ 263.104677] ? uhid_hid_stop+0x90/0x90 [ 263.104687] ? kernel_read+0x120/0x120 [ 263.176309] ? __inode_security_revalidate+0xd6/0x130 [ 263.181577] ? avc_policy_seqno+0x9/0x20 [ 263.185634] ? selinux_file_permission+0x85/0x480 [ 263.190570] ? security_file_permission+0x89/0x1f0 [ 263.195496] ? rw_verify_area+0xea/0x2b0 [ 263.199557] vfs_write+0x198/0x500 [ 263.203096] SyS_write+0xfd/0x230 [ 263.206535] ? SyS_read+0x230/0x230 [ 263.210155] ? do_syscall_64+0x53/0x640 [ 263.214131] ? SyS_read+0x230/0x230 [ 263.217757] do_syscall_64+0x1e8/0x640 [ 263.221631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.226472] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.231750] RIP: 0033:0x459829 [ 263.234934] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.242628] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 263.249966] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 263.257224] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 263.264480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 263.271742] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x0, 0x2}}, 0x20) [ 263.295504] input: syz1 as /devices/virtual/input/input861 18:44:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x3, 0x9b, &(0x7f0000000100)="bc6e23a3b85e0a97b4b7cbecf60f262fc4f4e8bc712e0f22c37cccbbc974cbcf7601152524a948a3376d2fe93cb2232b2ff724958413172795c44fcb138977e5da249f58a023f59ad681c38109701413469f86bc1ffd14f8cdd16e234a16f6526b68e2aa459f9726d7549f516efe780ee5245fcb57436e7c5c9af1cc2880caaa6f2aceb4f42749b32e7abce273d8c38051e6ef77dffe7c5841e2a0"}) 18:44:30 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 263.394652] input: syz1 as /devices/virtual/input/input865 [ 263.474628] input: syz1 as /devices/virtual/input/input867 [ 263.486786] input: syz1 as /devices/virtual/input/input868 18:44:31 executing program 2 (fault-call:3 fault-nth:35): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x6, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r2) 18:44:31 executing program 0: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)=""/233, &(0x7f0000000240)=0xe9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)='/dev/input/event#\x00'}, 0x30) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000380)) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r3) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 18:44:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x8, {0x6, 0x4, 0x1, 0x1}}, 0x20) 18:44:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0xfff}, &(0x7f0000000280)=0x8) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet(0x2, 0x1, 0xa1a6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r4, 0x6c, "5f0c480a9bfc9c1930189a6fe5951b081baf7f5f06bd30c9ac9f9c9ebb2ae49b864333ac6143504de870d9bf39d32babb9bad64fa39274b17ac7538d00002cec2e2d2747036d1c11b29efbd649833518f62731e0091a6acb5857f2622c8ceb5cdd8c0a2934d9f405ac567c8a"}, &(0x7f0000000140)=0x74) 18:44:31 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 263.773811] input: syz1 as /devices/virtual/input/input870 [ 263.788063] hid-generic 0000:0000:0000.0040: ignoring exceeding usage max [ 263.799769] input: syz1 as /devices/virtual/input/input871 [ 263.811350] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on sz1 [ 263.835260] input: syz1 as /devices/virtual/input/input872 [ 263.841773] input: syz1 as /devices/virtual/input/input873 [ 263.876353] FAULT_INJECTION: forcing a failure. [ 263.876353] name failslab, interval 1, probability 0, space 0, times 0 [ 263.896447] CPU: 1 PID: 13750 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 263.903577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.913062] Call Trace: [ 263.915652] dump_stack+0x138/0x19c [ 263.919283] should_fail.cold+0x10f/0x159 [ 263.923430] should_failslab+0xdb/0x130 [ 263.927416] kmem_cache_alloc_node+0x287/0x780 [ 263.931993] __alloc_skb+0x9c/0x500 [ 263.935606] ? skb_scrub_packet+0x4b0/0x4b0 [ 263.940069] ? netlink_has_listeners+0x20a/0x330 [ 263.944820] kobject_uevent_env+0x781/0xc23 [ 263.949136] ? wait_for_completion+0x420/0x420 [ 263.953707] kobject_uevent+0x20/0x26 [ 263.957493] device_del+0x65c/0xaa0 [ 263.961108] ? __device_links_no_driver+0x220/0x220 [ 263.966112] hid_destroy_device+0xe4/0x160 [ 263.970335] uhid_dev_destroy+0x9c/0x100 [ 263.974383] uhid_char_write+0xab9/0xf00 [ 263.978432] __vfs_write+0x105/0x6b0 [ 263.982135] ? uhid_hid_stop+0x90/0x90 [ 263.986006] ? kernel_read+0x120/0x120 [ 263.989890] ? __inode_security_revalidate+0xd6/0x130 [ 263.995163] ? avc_policy_seqno+0x9/0x20 [ 263.999298] ? selinux_file_permission+0x85/0x480 [ 264.004128] ? security_file_permission+0x89/0x1f0 [ 264.009054] ? rw_verify_area+0xea/0x2b0 [ 264.013113] vfs_write+0x198/0x500 [ 264.016643] SyS_write+0xfd/0x230 [ 264.020194] ? SyS_read+0x230/0x230 [ 264.023815] ? do_syscall_64+0x53/0x640 [ 264.027878] ? SyS_read+0x230/0x230 [ 264.031737] do_syscall_64+0x1e8/0x640 [ 264.035609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.040449] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.045646] RIP: 0033:0x459829 [ 264.048820] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.056604] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 264.063860] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 18:44:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x8, 0x3ff, 0x7fffffff}) [ 264.071201] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 264.078456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 264.085715] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 264.112011] input: syz1 as /devices/virtual/input/input874 18:44:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x16) 18:44:31 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47b") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0xfff}, &(0x7f0000000280)=0x8) ioctl$UI_DEV_DESTROY(r0, 0x5502) r3 = socket$inet(0x2, 0x1, 0xa1a6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={r4, 0x6c, "5f0c480a9bfc9c1930189a6fe5951b081baf7f5f06bd30c9ac9f9c9ebb2ae49b864333ac6143504de870d9bf39d32babb9bad64fa39274b17ac7538d00002cec2e2d2747036d1c11b29efbd649833518f62731e0091a6acb5857f2622c8ceb5cdd8c0a2934d9f405ac567c8a"}, &(0x7f0000000140)=0x74) 18:44:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x100) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x50, 0x800) dup2(r0, r2) [ 264.299775] input: syz1 as /devices/virtual/input/input879 [ 264.316812] input: syz1 as /devices/virtual/input/input881 [ 264.335766] input: syz1 as /devices/virtual/input/input880 [ 264.346095] input: syz1 as /devices/virtual/input/input882 [ 264.494128] input: syz1 as /devices/virtual/input/input884 18:44:31 executing program 2 (fault-call:3 fault-nth:36): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 18:44:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {0x40}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85b]}, 0x45c) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x20200, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000180)) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x1f}) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x2, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x54}}, 0x40000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x46dd18cd10f2e47e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='irlan0\x00', 0x5, 0x5, 0x38}) 18:44:31 executing program 0: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x80) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)=""/233, &(0x7f0000000240)=0xe9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000300)='/dev/input/event#\x00'}, 0x30) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000380)) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r3) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 18:44:31 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x92, 0x100) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) dup2(r0, r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) [ 264.599403] input: syz1 as /devices/virtual/input/input885 [ 264.609458] hid-generic 0000:0000:0000.0041: ignoring exceeding usage max [ 264.617489] input: syz1 as /devices/virtual/input/input886 [ 264.659101] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on sz1 [ 264.681573] input: syz1 as /devices/virtual/input/input888 [ 264.699976] FAULT_INJECTION: forcing a failure. [ 264.699976] name failslab, interval 1, probability 0, space 0, times 0 [ 264.723481] CPU: 1 PID: 13816 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 264.730752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.740100] Call Trace: [ 264.742686] dump_stack+0x138/0x19c [ 264.746308] should_fail.cold+0x10f/0x159 [ 264.750448] should_failslab+0xdb/0x130 [ 264.754418] kmem_cache_alloc_node_trace+0x280/0x770 [ 264.759508] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 264.764948] __kmalloc_node_track_caller+0x3d/0x80 [ 264.769868] __kmalloc_reserve.isra.0+0x40/0xe0 [ 264.774532] __alloc_skb+0xcf/0x500 [ 264.778196] ? skb_scrub_packet+0x4b0/0x4b0 [ 264.782502] ? netlink_has_listeners+0x20a/0x330 [ 264.788024] kobject_uevent_env+0x781/0xc23 [ 264.792332] ? wait_for_completion+0x420/0x420 [ 264.796900] kobject_uevent+0x20/0x26 [ 264.800772] device_del+0x65c/0xaa0 [ 264.804393] ? __device_links_no_driver+0x220/0x220 [ 264.809396] hid_destroy_device+0xe4/0x160 [ 264.813629] uhid_dev_destroy+0x9c/0x100 [ 264.817678] uhid_char_write+0xab9/0xf00 [ 264.821731] __vfs_write+0x105/0x6b0 [ 264.825430] ? uhid_hid_stop+0x90/0x90 [ 264.829302] ? kernel_read+0x120/0x120 [ 264.833279] ? __inode_security_revalidate+0xd6/0x130 [ 264.838453] ? avc_policy_seqno+0x9/0x20 [ 264.842505] ? selinux_file_permission+0x85/0x480 [ 264.847333] ? security_file_permission+0x89/0x1f0 [ 264.852247] ? rw_verify_area+0xea/0x2b0 [ 264.856385] vfs_write+0x198/0x500 [ 264.859913] SyS_write+0xfd/0x230 [ 264.863353] ? SyS_read+0x230/0x230 [ 264.866971] ? do_syscall_64+0x53/0x640 [ 264.870928] ? SyS_read+0x230/0x230 [ 264.874544] do_syscall_64+0x1e8/0x640 [ 264.878423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.883262] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.888445] RIP: 0033:0x459829 [ 264.891624] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.899323] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 18:44:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x57f, 0x400) [ 264.906780] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 264.914040] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 264.921303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 264.928556] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 264.938225] input: syz1 as /devices/virtual/input/input889 18:44:32 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup2(r0, r1) [ 264.977029] input: syz1 as /devices/virtual/input/input890 18:44:32 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xb) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) [ 265.075219] input: syz1 as /devices/virtual/input/input892 18:44:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 265.147165] input: syz1 as /devices/virtual/input/input895 18:44:32 executing program 2 (fault-call:3 fault-nth:37): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r1, r1) 18:44:32 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf0") setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:32 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0xbe, 0x0, 0x2006, 0x6, 0x8001, {0x5, 0x1ff}, 0x1}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) timerfd_create(0x1, 0x80000) 18:44:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 18:44:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) sysfs$1(0x1, &(0x7f0000000080)='/dev/input/event#\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 265.440635] input: syz1 as /devices/virtual/input/input899 [ 265.449190] hid-generic 0000:0000:0000.0042: ignoring exceeding usage max [ 265.463241] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on sz1 [ 265.474160] input: syz1 as /devices/virtual/input/input902 [ 265.494528] input: syz1 as /devices/virtual/input/input903 [ 265.518991] input: syz1 as /devices/virtual/input/input901 [ 265.536545] FAULT_INJECTION: forcing a failure. [ 265.536545] name failslab, interval 1, probability 0, space 0, times 0 [ 265.551971] input: syz1 as /devices/virtual/input/input904 [ 265.566255] CPU: 1 PID: 13878 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 265.573556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.582923] Call Trace: [ 265.585526] dump_stack+0x138/0x19c [ 265.589177] should_fail.cold+0x10f/0x159 [ 265.593341] should_failslab+0xdb/0x130 [ 265.597427] __kmalloc+0x2f0/0x7a0 [ 265.601099] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 265.601113] ? kobject_uevent_env+0x378/0xc23 [ 265.601125] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.601135] ? kobject_get_path+0xbb/0x1a0 [ 265.601150] kobject_get_path+0xbb/0x1a0 [ 265.611178] ? devm_device_remove_groups+0x50/0x50 [ 265.611190] kobject_uevent_env+0x39c/0xc23 [ 265.611200] ? wait_for_completion+0x420/0x420 [ 265.611216] kobject_uevent+0x20/0x26 18:44:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0xc9, 0x5, 0x2, 0x7b9, 0xa2, 0x80000}) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 265.624492] device_del+0x65c/0xaa0 [ 265.624507] ? __device_links_no_driver+0x220/0x220 [ 265.624525] hid_destroy_device+0xe4/0x160 [ 265.624535] uhid_dev_destroy+0x9c/0x100 [ 265.624546] uhid_char_write+0xab9/0xf00 [ 265.633771] __vfs_write+0x105/0x6b0 [ 265.633781] ? uhid_hid_stop+0x90/0x90 [ 265.633790] ? kernel_read+0x120/0x120 [ 265.633801] ? __inode_security_revalidate+0xd6/0x130 [ 265.633813] ? avc_policy_seqno+0x9/0x20 [ 265.633823] ? selinux_file_permission+0x85/0x480 [ 265.633837] ? security_file_permission+0x89/0x1f0 [ 265.633850] ? rw_verify_area+0xea/0x2b0 [ 265.642441] vfs_write+0x198/0x500 [ 265.642455] SyS_write+0xfd/0x230 [ 265.642467] ? SyS_read+0x230/0x230 [ 265.642478] ? do_syscall_64+0x53/0x640 [ 265.642489] ? SyS_read+0x230/0x230 [ 265.663470] do_syscall_64+0x1e8/0x640 [ 265.663480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.663498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.663506] RIP: 0033:0x459829 [ 265.663511] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:44:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 18:44:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 265.663523] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 265.671103] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 265.671109] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 265.671114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 265.671120] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 265.784305] input: syz1 as /devices/virtual/input/input907 18:44:33 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:33 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 265.871550] input: syz1 as /devices/virtual/input/input908 [ 265.893775] input: syz1 as /devices/virtual/input/input910 [ 265.936663] input: syz1 as /devices/virtual/input/input911 18:44:33 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 18:44:33 executing program 2 (fault-call:3 fault-nth:38): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:33 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0xbe, 0x0, 0x2006, 0x6, 0x8001, {0x5, 0x1ff}, 0x1}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) bind$rose(r1, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @null]}, 0x40) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x400, 0x9, 0x6, 0x4}, 'syz0\x00', 0x57}) 18:44:33 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) dup2(r0, r1) 18:44:33 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 266.273532] input: syz1 as /devices/virtual/input/input912 [ 266.289910] input: syz1 as /devices/virtual/input/input913 [ 266.306031] input: syz1 as /devices/virtual/input/input915 [ 266.330515] hid-generic 0000:0000:0000.0043: ignoring exceeding usage max 18:44:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 266.373938] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on sz1 [ 266.387402] FAULT_INJECTION: forcing a failure. [ 266.387402] name failslab, interval 1, probability 0, space 0, times 0 [ 266.399281] CPU: 1 PID: 13945 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 266.406411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.415792] Call Trace: [ 266.418391] dump_stack+0x138/0x19c [ 266.418409] should_fail.cold+0x10f/0x159 [ 266.418423] should_failslab+0xdb/0x130 [ 266.430152] kmem_cache_alloc_node_trace+0x280/0x770 [ 266.430167] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 266.430182] __kmalloc_node_track_caller+0x3d/0x80 [ 266.430196] __kmalloc_reserve.isra.0+0x40/0xe0 [ 266.430206] __alloc_skb+0xcf/0x500 [ 266.430215] ? skb_scrub_packet+0x4b0/0x4b0 [ 266.430225] ? netlink_has_listeners+0x20a/0x330 [ 266.430239] kobject_uevent_env+0x781/0xc23 [ 266.430248] ? wait_for_completion+0x420/0x420 18:44:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 266.430264] kobject_uevent+0x20/0x26 [ 266.430273] device_del+0x65c/0xaa0 [ 266.430284] ? __device_links_no_driver+0x220/0x220 [ 266.430301] hid_destroy_device+0xe4/0x160 [ 266.440942] uhid_dev_destroy+0x9c/0x100 [ 266.440953] uhid_char_write+0xab9/0xf00 [ 266.440969] __vfs_write+0x105/0x6b0 [ 266.440979] ? uhid_hid_stop+0x90/0x90 [ 266.440989] ? kernel_read+0x120/0x120 [ 266.441000] ? __inode_security_revalidate+0xd6/0x130 [ 266.441011] ? avc_policy_seqno+0x9/0x20 [ 266.441021] ? selinux_file_permission+0x85/0x480 [ 266.441033] ? security_file_permission+0x89/0x1f0 [ 266.441044] ? rw_verify_area+0xea/0x2b0 [ 266.450627] vfs_write+0x198/0x500 [ 266.450641] SyS_write+0xfd/0x230 [ 266.450653] ? SyS_read+0x230/0x230 [ 266.450663] ? do_syscall_64+0x53/0x640 [ 266.450674] ? SyS_read+0x230/0x230 [ 266.450684] do_syscall_64+0x1e8/0x640 [ 266.450692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.450707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.458626] RIP: 0033:0x459829 18:44:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 18:44:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x20340) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x2, 0x5, "9492ecb58f65aa3d8c205061aa79575b"}, 0x15, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x4, @remote, 0x7}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @rand_addr=0x7ff}], 0x4c) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x8000) dup2(r0, r2) [ 266.458631] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.458642] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 266.458647] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 266.458653] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 266.458659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 266.458665] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 18:44:33 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 266.643850] input: syz1 as /devices/virtual/input/input918 [ 266.697228] input: syz1 as /devices/virtual/input/input919 [ 266.741967] input: syz1 as /devices/virtual/input/input921 [ 266.813503] input: syz1 as /devices/virtual/input/input922 18:44:34 executing program 2 (fault-call:3 fault-nth:39): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x12e) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 18:44:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 18:44:34 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0xbe, 0x0, 0x2006, 0x6, 0x8001, {0x5, 0x1ff}, 0x1}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:44:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8b2561956dccd94b86dd6708be00498385938bdf823942828281fc87255e89427c5f2df63e5dcce1f2e854623d0830f2861d4bbecf2c9c99fbcecb2d80f9fbc81d881c08cc2f1b7e7c709f622d8833facf6a3d9c66272b1b957b7f36aa82cd38dee280e81fe794799bc30635620e01897af838b9bf9daacfcc5c5baf61377fe98d44aaa2c13f3c58a63b96590136830099cf4ae47b970541a9ae13bf012a95fcbdb09fa41faeab51639ae69800927b33130b9de4912f33460b7e65109ae96a9cc7918bb7c38fe73393b9091a40e840a4b8e510fb9a64f1", 0xd7}, {&(0x7f00000001c0)="32b63b491f90b1db9035d77c4471b017fe23282e74822fedcddd1285857cdb16d4941e8a4e7f171a6c765214be85330cf1605a5e758704f2a701859d28c533088f85e1c7e96c6c14b5d5f842fa44ec3f294d84561e1eb6e4f67e6f110bea5ca00523f4a3f19518c4f98761567225624741317f6bf66efc993cce99dba1a5d4f62f52856398d5542e9c9c7299f420769ed024e7aa6143b5f9edeac16ac7e5429f4788447ea22b0970ff57a0bbf9bfef7f41fac96a8acd1b578f6933152e1c730c791158beb76d7d5ad8ee9d723b22436039c13227bac66abee7d473bba2c8", 0xde}, {&(0x7f0000000000)="9449fd1b18a262581f6c", 0xa}], 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:44:34 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) 18:44:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x420000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x33a, 0x800}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf2ce9894ea2dc1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa369ec9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004800}, 0x1) dup2(r0, r4) 18:44:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 267.129575] input: syz1 as /devices/virtual/input/input924 [ 267.144588] input: syz1 as /devices/virtual/input/input923 [ 267.152379] input: syz1 as /devices/virtual/input/input925 [ 267.158739] hid-generic 0000:0000:0000.0044: ignoring exceeding usage max 18:44:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 267.185930] input: syz1 as /devices/virtual/input/input926 [ 267.224892] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on sz1 18:44:34 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') ioctl$FICLONE(r4, 0x40049409, r1) dup2(r3, r1) [ 267.273719] FAULT_INJECTION: forcing a failure. [ 267.273719] name failslab, interval 1, probability 0, space 0, times 0 [ 267.309817] CPU: 0 PID: 14003 Comm: syz-executor.2 Not tainted 4.14.139 #35 18:44:34 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x75}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcdb1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2f6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4}, 0x40840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) accept4$netrom(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000240)=0x6ad4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl(0xffffffffffffffff, 0x401000008912, &(0x7f0000000340)="11dca5055e0bcfe47bf070") setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x04') [ 267.317086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.326440] Call Trace: [ 267.329036] dump_stack+0x138/0x19c [ 267.332673] should_fail.cold+0x10f/0x159 [ 267.336826] should_failslab+0xdb/0x130 [ 267.340803] kmem_cache_alloc_node+0x287/0x780 [ 267.345394] __alloc_skb+0x9c/0x500 [ 267.349026] ? skb_scrub_packet+0x4b0/0x4b0 [ 267.353347] ? netlink_has_listeners+0x20a/0x330 [ 267.358102] kobject_uevent_env+0x781/0xc23 [ 267.362418] ? wait_for_completion+0x420/0x420 [ 267.362438] kobject_uevent+0x20/0x26 [ 267.362447] device_del+0x65c/0xaa0 [ 267.362458] ? __device_links_no_driver+0x220/0x220 [ 267.362475] hid_destroy_device+0xe4/0x160 [ 267.362486] uhid_dev_destroy+0x9c/0x100 [ 267.362496] uhid_char_write+0xab9/0xf00 [ 267.362511] __vfs_write+0x105/0x6b0 [ 267.362521] ? uhid_hid_stop+0x90/0x90 [ 267.362530] ? kernel_read+0x120/0x120 [ 267.362541] ? __inode_security_revalidate+0xd6/0x130 [ 267.362554] ? avc_policy_seqno+0x9/0x20 [ 267.370907] ? selinux_file_permission+0x85/0x480 [ 267.370920] ? security_file_permission+0x89/0x1f0 [ 267.370932] ? rw_verify_area+0xea/0x2b0 [ 267.370944] vfs_write+0x198/0x500 [ 267.370958] SyS_write+0xfd/0x230 [ 267.370969] ? SyS_read+0x230/0x230 [ 267.370980] ? do_syscall_64+0x53/0x640 [ 267.370989] ? SyS_read+0x230/0x230 [ 267.371000] do_syscall_64+0x1e8/0x640 [ 267.371009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.371022] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.371032] RIP: 0033:0x459829 [ 267.379632] RSP: 002b:00007ff992385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.379644] RAX: ffffffffffffffda RBX: 00007ff992385c90 RCX: 0000000000459829 [ 267.379649] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000003 [ 267.379655] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 267.379661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9923866d4 [ 267.379667] R13: 00000000004c9873 R14: 00000000004e0e90 R15: 0000000000000004 [ 267.413302] input: syz1 as /devices/virtual/input/input927 [ 267.434219] input: syz1 as /devices/virtual/input/input928 [ 267.524500] refcount_t: increment on 0; use-after-free. [ 267.530408] ------------[ cut here ]------------ [ 267.535183] WARNING: CPU: 0 PID: 14013 at lib/refcount.c:153 refcount_inc.cold+0x18/0x1f [ 267.543412] Kernel panic - not syncing: panic_on_warn set ... [ 267.543412] [ 267.550773] CPU: 0 PID: 14013 Comm: syz-executor.0 Not tainted 4.14.139 #35 [ 267.557857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.567212] Call Trace: [ 267.569783] dump_stack+0x138/0x19c [ 267.573394] panic+0x1f2/0x426 [ 267.576565] ? add_taint.cold+0x16/0x16 [ 267.580522] ? refcount_inc.cold+0x18/0x1f [ 267.584736] ? __warn.cold+0x14/0x36 [ 267.588428] ? refcount_inc.cold+0x18/0x1f [ 267.592641] __warn.cold+0x2f/0x36 [ 267.596162] ? ist_end_non_atomic+0x10/0x10 [ 267.600462] ? refcount_inc.cold+0x18/0x1f [ 267.604673] report_bug+0x216/0x254 [ 267.608281] do_error_trap+0x1bb/0x310 [ 267.612151] ? math_error+0x360/0x360 [ 267.615934] ? vprintk_emit+0x171/0x600 [ 267.619890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.624714] do_invalid_op+0x1b/0x20 [ 267.628404] invalid_op+0x1b/0x40 [ 267.631852] RIP: 0010:refcount_inc.cold+0x18/0x1f [ 267.636671] RSP: 0018:ffff8880834a7980 EFLAGS: 00010286 [ 267.642465] RAX: 000000000000002b RBX: 1ffff11010694f3d RCX: 0000000000000000 [ 267.649711] RDX: 0000000000007b31 RSI: ffffffff814b2ab5 RDI: ffffed1010694f26 [ 267.656956] RBP: ffff8880834a7988 R08: 000000000000002b R09: ffff888058b9c920 [ 267.664213] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805cec5ba0 [ 267.671463] R13: 0000000000000000 R14: ffff8880a52280c0 R15: ffff88809edf4ee8 [ 267.678721] ? vprintk_func+0x65/0x159 [ 267.682590] kobject_get+0x5b/0x70 [ 267.686107] cdev_get+0x54/0xa0 [ 267.689379] chrdev_open+0x9b/0x590 [ 267.692995] ? cdev_put.part.0+0x50/0x50 [ 267.697034] ? security_file_open+0x89/0x190 [ 267.701422] do_dentry_open+0x73b/0xeb0 [ 267.705375] ? cdev_put.part.0+0x50/0x50 [ 267.709415] vfs_open+0x105/0x220 [ 267.712846] path_openat+0x8bd/0x3f70 [ 267.716633] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 267.721286] ? __alloc_fd+0x1d4/0x4a0 [ 267.725066] do_filp_open+0x18e/0x250 [ 267.728843] ? may_open_dev+0xe0/0xe0 [ 267.732642] ? _raw_spin_unlock+0x2d/0x50 [ 267.736767] ? __alloc_fd+0x1d4/0x4a0 [ 267.740552] do_sys_open+0x2c5/0x430 [ 267.744244] ? filp_open+0x70/0x70 [ 267.747764] ? SyS_clock_gettime+0xf8/0x180 [ 267.752064] SyS_open+0x2d/0x40 [ 267.755320] ? do_sys_open+0x430/0x430 [ 267.759188] do_syscall_64+0x1e8/0x640 [ 267.763052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.767876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.773040] RIP: 0033:0x413711 [ 267.776207] RSP: 002b:00007f6cf9ec07a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 267.783894] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413711 [ 267.791144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6cf9ec0850 [ 267.798392] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 267.805639] R10: 00007f6cf9ec19d0 R11: 0000000000000293 R12: 00007f6cf9ec16d4 [ 267.812889] R13: 00000000004c8beb R14: 00000000004dfb28 R15: 00000000ffffffff [ 267.821216] Kernel Offset: disabled [ 267.824927] Rebooting in 86400 seconds..