066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 321.850242][ T9337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.873746][ T9337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 23:06:50 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 321.910061][ T9337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 321.957942][ T9337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 321.971862][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 322.001772][ T9337] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=53.12 [ 322.042274][ T9337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.084854][ T9337] usb 2-1: config 0 descriptor?? 23:06:50 executing program 1: ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000380)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video37\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54f3eb53a85d5cdeb561011c19efa823db424a7aa68f4b5f7117573d4ab36499acf3289cca9869d35eda463c9c0a100205b1919838c46d73bc388095b6b1360ebc32c4a2b4c52b936460f0e344d2539b6e9440e0808c08812a5bfb47ea9cc39f7d3a2b7e0556d0ec38ac9bca8a79ceff971b08a4e70d79e4fcef77a6c39ee006c8c3c2ca74d8b4b752a8ffc0ab8e32224fd8f131e85000abc87dc5b5cd9224ab52b0e67b0f156a6604eb65348fe77ef2b0b619c5aba0a4310d37ff203f79766ee117c6aedbebdc49ae138e80d454bdbb513377c8fe6d7b"], 0x6a4}}, 0x0) r1 = creat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r2, 0x800000000000937e, &(0x7f00000000c0)="01000000000000001801916d67297bb8b77809282c5f46bf9685615be8da2ffa487125127b798fa31cd62b705cd21ab2d3228d8aa17114f5") fallocate(r1, 0x0, 0x0, 0x8800000) [ 322.210501][ T9337] usb 2-1: can't set config #0, error -71 [ 322.240041][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 322.247033][ T9337] usb 2-1: USB disconnect, device number 3 [ 322.360312][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.382726][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.426492][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.462964][ T5] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 322.477591][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.498185][ T5] usb 1-1: config 0 descriptor?? [ 322.680127][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 322.686339][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 322.712200][ T5] usb 1-1: USB disconnect, device number 3 23:06:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000110400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000011c00128009000100626f6e6400002f0e000000000000030000000000ca58b610cd605fd490094271e2b36b26dfb702f07813406776dcebcc323054ad41188e9fea0ba1037fb3eddb20fc9603ec8d8548dd7f06addd0c39d6a0197c1caed4e371df0bd321b5fa8c989cf6229835dab776ec7522027559097affb43fb0b7a1"], 0x3c}}, 0x0) 23:06:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:06:52 executing program 1: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50a, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x80, 0x2000000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r2, 0x5603, 0xfffffffffffffffd) ioctl(r2, 0x6, &(0x7f0000000180)="7ecda62d571b695c542184584bf0358109ec8a8ee5bb5684bba342309046b1bc756d143a100b66a58d426666d0f499afceae2b876afe7bdd79065ac8fd425a817154992cd63e993a5b") clone(0x100, &(0x7f0000000500)="23c234c7ba16a7fedc327725a2a74c2410e6e0b8c8fa4efa157d9e3a66b746e595b819b8984a05cfda1a320aa5fb6c9104a2d2215b418bf1b6370c31122f86f09c4e728a52a9065284a0b2b8f9a14aea1df7ad6048f95eb21b02df10a9220816bcba07fab636d3a2cf40cc9796dc24be652e37cd65b5ece93b5bdd59bc402e206f84ffc22e75ee71235c842f61c7f843e9b0ff4c1d9144efdac2838f56bd7724aa2b8a5a8ca30c8652537dff61c5a4810c346e3393e59bfacac03f98f9546ef1cc047e82eda02709b0318a97b9432d1fb24a675a7f9af829d32a18c7f2a6ea6a4d21d37bf1629a64050891a5565b2fa36d", &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000740)="5f228e9bbfaef4c04a52619c638851fe784afb72b97fb2724aedb147434631f3e3655cb8866a10f650aa80ef9c41b9e5143da23959e085e05ed631f429300fd594b83473c7253242c605fbd700ac6898de9501b93dbec2aa684b5d0f0baa0be75fb889935ce57c9b561016b05b0d512b3e3105b77073508aa3951e3ee563f5fd2170666fbe07c215e17b8f5266e469304065b83af3f86261273b99") syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ustat(0x1d, &(0x7f0000000000)) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140xffffffffffffffff}) pipe(&(0x7f0000000000)) accept(r0, &(0x7f0000000300)=@xdp, &(0x7f0000000240)=0x80) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) getuid() 23:06:52 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='openpromfs\x00', 0x1040000, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00') move_mount(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0/file0\x00', 0x0) [ 324.058884][T10682] IPVS: ftp: loaded support on port[0] = 21 [ 324.090480][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:06:52 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000340)=0xc) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffd4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001fc1e8e6f4ed158770000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x14000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010410000000000000000300000018fbfbf87be9ff6e4ce78f7c4c3fbba558e67891aee8a9801697f62b96b134898edb15fe445c0fb12962ccc3e7b0baf44c14c64a658371e38ad96c8e0ef0b281f973157e8854fda8b1d0723c88c40ddd4801", @ANYRES32=r3, @ANYBLOB='\x00\n\x00'/12, @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x700000000000000) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x0) [ 324.147511][T10692] can: request_module (can-proto-4) failed. [ 324.232594][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:06:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) fcntl$notify(r3, 0x402, 0x80000023) recvmsg$can_raw(r4, &(0x7f0000000580)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/61, 0x3d}], 0x7}, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x880, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvme-fabrics\x00', 0x101100, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r1}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000002840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000027c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x400c0c0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002880)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010063616b650000000014000200080011000000000008000d0000000000"], 0x44}}, 0x0) 23:06:53 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:06:53 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8000, 0x0) open(0x0, 0x12000, 0x100) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt(0xffffffffffffffff, 0x203a8d, 0x5, &(0x7f00000003c0)=""/153, &(0x7f0000000000)=0x99) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000480)={0x7fffffff, {{0x2, 0x4e24, @private=0xa010101}}}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005000300"], 0x24}}, 0x0) pipe2(&(0x7f0000000180), 0x80000) [ 324.455858][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.490333][T10715] device vlan0 entered promiscuous mode [ 324.536696][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.622246][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.643334][T10692] IPVS: ftp: loaded support on port[0] = 21 [ 324.659160][T10695] can: request_module (can-proto-4) failed. [ 324.687317][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.771182][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.802661][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0xe}, 0x3070, 0x2, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x81, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB], 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x34}}, 0x20040010) close_range(0xffffffffffffffff, r1, 0x2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x44100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x3}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x800000000000000) geteuid() set_thread_area(&(0x7f0000000440)={0x2, 0x20000000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) fcntl$getflags(r0, 0xb) 23:06:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000380)='security.ima\x00', &(0x7f00000003c0)=@sha1={0x1, "2b707f04fd044e746856ab08c9fa47160c2eee49"}, 0x15, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {0xd, 0x8}, {0xb, 0x2}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xc0000000}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a000200", @ANYRES32=r5, @ANYBLOB="14000100fe80"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 23:06:53 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:06:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x17809}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB="e00000004a9e0300000000000000b603a2bbda01010000c7d9e14eb6752c4afe1ad8f915a17ef25316a6d9ecc1b43126823aaaa788c7deff88c68304f274c0f167fc422557f456f13088f0d9b5238ddf27e984227a3e3267605aa11593b4e9af8a88fe47f59612ba2fe64cc7fd3202000000380da1b05229849f5ef90dd303d91dfdc42e7dc9647835e23bc9504032ec5d7fa10ef2e79fffc6c074c3c9e427d87137c37f2af1c09f016f88dabe684cc757c4ffed082df45b0b0a5cb254f0a12e089f70c2f56aa869dff65243ee6d51185b71bdde84d62dfc858407fd5eae9e0b02658493c1ce9bfc48ec8b0607c5", @ANYBLOB="200026bd7000fddbdf2521000600000000000000dd9aa08b2a006edeccf92c065eaea0ee506146176da45dfd2433619fc3bbd1a83a04ffa72dd26ecb0cf06c85fc3148f5a9b350ba5e103b08ca9f27ba2ce5a1cbfaadc8e0d44e76444c9b37f46f3a1764e6b8101202a7e5103b9b17907b403e6632da5d5ebdfa6c3220fa476a538134da1abe373658b05caffaaa21566566b318f3d6bf35b536171f546118ef53885c945e7f38b230f58d4837d72e8497a5d58242bdbac858b918ac207411fcd1264476a3a39565909374c6bfff3df72f97452442193c5a105ec0522211730f75cd2f47310962ee3027b180d9b8501c", @ANYBLOB="ac0084804c000680080002006f00000008000200070000000800010004000000080000004106000008000200070000000800030004000000080003000000000008000000ff0100"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x24040854) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x240002, 0x0) write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x2, 0x0, 0x2}, 0x7ff}}, 0x18) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967482641ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746b9c66ba", 0x7ff2, 0x20c49a, 0x0, 0x27) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 325.176290][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.214995][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:55 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 327.705845][T10680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:06:57 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "572e835bff42f03a626e7bbc0011f3dec305b5f6c8c923020cee02ace57e7ecf1a4d905c82924351d52da1af56307d661655c22043e9b1637fddc3311dee5b7ab8f9b85f8d5527e6f6e67adc43cba65f3ded52cf4484e9431bf36c08ca04c8bf6058df795ec67359b43d7f09930ae517124bdbe271023dd82d382d721cd621072c36c80777c1c675e0c769c1100633f1ed8050cdb2e14ed82df14d286ba24a73e7464348efae7e7f65be09250eb900135bc07a290a74b9ded4574961dcdaf375efe2eca1b896650dc19b61f1fe9dd45bd064811f1829ef88369e827eea438ef96aa83f6b1a477f0eb3ba2f648ec99d33348a3c862bfbfb19f17801d6439ef888", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:06:58 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x1000, 0xa000) dup(0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x24402, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x3098c0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000780)=ANY=[], 0x14) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0x3, 0x4000000000020) getsockopt$inet_int(r1, 0x0, 0xb, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x7f, 0x0, 0x0, 0x7c, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x5}, 0x2b01a, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0xa) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x750, {}, {0x2, 0x0, @remote}, {0x2, 0x4e22, @empty}, 0x100, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="4d28a31bd9eed88b007ffdc5345f563eb0036f40a4df9965686c1f0000008dbb78f2a122e909431e64adc859b6ec8f2343a25275b2cc3bfd0c7d916f532f609102b27f2b2fcc7cc84db7ea93cf27e5d5365de90565f145bcb6fd02f358df6f409492312b57a3657b8c086fd1b7c0d5eb74c8e21cc3d601430c2af6b64f6e06cba649e1852e755a290600f7069988cf40ac685f70bca11889ad39c7d5c5beb9227dbf8c943489144f061264c0684b6a94a41f8092fd72f19e466bcc592cc74fec0d7080bac3be865f1bb2547c2d1b8fa26e3e898c9ff09c8c88fc6e18bbcf19be33fb32c9f2852e98380e49181e9bfb75f7c4e7fadfa179aaeb3942e8ecb1eef1b178f51fb59667013994c1755728fe8e467a19b9bbab8ca4cfa4456a1c83461df35916c39a888016d37512773c3a136fd08bac3b56593e394e494888a221a318f2"], 0xbf) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) 23:06:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qrtr-tun\x00', 0x101002) io_setup(0x5, &(0x7f0000000380)=0x0) socket$pptp(0x18, 0x1, 0x2) eventfd2(0x26010000, 0x80c03) io_submit(r2, 0x0, &(0x7f0000000000)) 23:06:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x41c1, 0x1060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x40021, 0x0, 0x8000, 0x7, 0x3, 0x80004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xb000, 0x0, &(0x7f0000ff5000/0xb000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xd800) shmdt(r1) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4), 0x1c) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000040)=0x5) memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 23:06:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0x6, 0x101, 0x0, 0x0, {0xd04575e97c5bbceb}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000c00078005401500400000000500050002000000050001000600000016000300686173683a6e6574"], 0x5c}}, 0x0) 23:06:58 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:06:58 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 329.680944][T10819] __nla_validate_parse: 2 callbacks suppressed [ 329.680964][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.695855][T10818] IPVS: ftp: loaded support on port[0] = 21 23:06:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0xfffffffffffffe61}, @val={0xc, 0x99, {0x46, 0x73}}}}, ["", "", "", "", ""]}, 0x28}}, 0x805) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004000c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="190f0000bd100000000003"], 0x14}}, 0x0) 23:06:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa05, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, {0xa, 0x4e23, 0xff, @private1={0xfc, 0x1, [], 0x1}}, 0xc1ed, [0x0, 0x4000006, 0x0, 0x81, 0x10000, 0xfffffffe, 0x10001]}, 0x5c) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0xc100) ioctl$CHAR_RAW_PBSZGET(r3, 0x127b, &(0x7f00000000c0)) write$nbd(r1, 0x0, 0x10) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000340)={0x0, 0x0, 0x1c}) creat(&(0x7f00000002c0)='./bus\x00', 0x8) [ 329.852619][T10819] Can't find ip_set type bitmap:ip,mac 23:06:58 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:06:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0xbae000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x80, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x2, 0x1) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) [ 329.954718][T10823] IPVS: ftp: loaded support on port[0] = 21 23:06:59 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:06:59 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:02 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0xbae000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x80, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x2, 0x1) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 23:07:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0xfffffffffffffe61}, @val={0xc, 0x99, {0x46, 0x73}}}}, ["", "", "", "", ""]}, 0x28}}, 0x805) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004000c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="190f0000bd100000000003"], 0x14}}, 0x0) 23:07:02 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "572e835bff42f03a626e7bbc0011f3dec305b5f6c8c923020cee02ace57e7ecf1a4d905c82924351d52da1af56307d661655c22043e9b1637fddc3311dee5b7ab8f9b85f8d5527e6f6e67adc43cba65f3ded52cf4484e9431bf36c08ca04c8bf6058df795ec67359b43d7f09930ae517124bdbe271023dd82d382d721cd621072c36c80777c1c675e0c769c1100633f1ed8050cdb2e14ed82df14d286ba24a73e7464348efae7e7f65be09250eb900135bc07a290a74b9ded4574961dcdaf375efe2eca1b896650dc19b61f1fe9dd45bd064811f1829ef88369e827eea438ef96aa83f6b1a477f0eb3ba2f648ec99d33348a3c862bfbfb19f17801d6439ef888", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:02 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa05, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, {0xa, 0x4e23, 0xff, @private1={0xfc, 0x1, [], 0x1}}, 0xc1ed, [0x0, 0x4000006, 0x0, 0x81, 0x10000, 0xfffffffe, 0x10001]}, 0x5c) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0xc100) ioctl$CHAR_RAW_PBSZGET(r3, 0x127b, &(0x7f00000000c0)) write$nbd(r1, 0x0, 0x10) ftruncate(r0, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000340)={0x0, 0x0, 0x1c}) creat(&(0x7f00000002c0)='./bus\x00', 0x8) 23:07:03 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) futex(&(0x7f0000000100), 0x0, 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0xbae000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x80, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x2, 0x1) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 23:07:03 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:03 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:03 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:03 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "572e835bff42f03a626e7bbc0011f3dec305b5f6c8c923020cee02ace57e7ecf1a4d905c82924351d52da1af56307d661655c22043e9b1637fddc3311dee5b7ab8f9b85f8d5527e6f6e67adc43cba65f3ded52cf4484e9431bf36c08ca04c8bf6058df795ec67359b43d7f09930ae517124bdbe271023dd82d382d721cd621072c36c80777c1c675e0c769c1100633f1ed8050cdb2e14ed82df14d286ba24a73e7464348efae7e7f65be09250eb900135bc07a290a74b9ded4574961dcdaf375efe2eca1b896650dc19b61f1fe9dd45bd064811f1829ef88369e827eea438ef96aa83f6b1a477f0eb3ba2f648ec99d33348a3c862bfbfb19f17801d6439ef888", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:03 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:03 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:04 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) accept4(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x80000) 23:07:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) accept(r0, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@rand_addr=0x64010101, @broadcast}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4c, 0x2802) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xed3) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x7f, 0x9, 0x381, 0x1}, 0x8) 23:07:04 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:06 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x2) unshare(0x40000000) keyctl$session_to_parent(0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x5, 0x8c481) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) pipe(0x0) r1 = socket$inet(0x2, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x119000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0) 23:07:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r4, 0x699686b5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000), 0x4) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 23:07:06 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r3 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x40, 0x200000) setsockopt$inet_dccp_int(r3, 0x21, 0xa, &(0x7f0000000500)=0x66b3, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004010}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x93c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8eb1a9"}, @NL80211_ATTR_FILS_ERP_REALM={0xc2, 0xfa, "f9d055bb9a431f6a5ea414480e0076b7e2bc8004d32feecaf7a1b25a58de75241fc8a53b6cae628c66df29ddd5c9e54f57bed759c5d4b98b59b53f4957190fc44725228d370a92c8f3f135ffe60af2421eadd38feea1510bc880995d1a33454c1656671759fc7cd6d3882ce69a514a2bcddd6a3bcbcdd85da12d067a72cc83b8087da6d4c4911ae5c1e56c06259a86d058a7ebfd4bd36b1a4589e9657c2484de0134ddaf7b0e9d410c179c3765dfd253dc18501a951a89a4a9e6196ec13e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xffa2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "aca728eba8"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xec, 0xfa, "5b51dc2ef09cb893b20d118ce2a78d9f980e0443930ffdd0df681a17f72845b2d4066eaba402b524c39d47d5cc466832d77e33da2f2fc0836559b4f13106c98d755092e2eab06d33451d20eee86f85cd76efa58bb0afce7786f82da183af580cd1de25cc27b4e07368cb4ae1feb281e710cca810d73aa0b2fb20c91f99e9bca35d14d3427b0b50033389ad4f8b6706109fe02f3ac008cd2133b6d77c082464b4b865e9b4d0a96141b865fd626248a4d048b1f81c261e2b1cacbea54e27bff4f4ae06e8dba4ddd7a796140b4b52fc62da42fe612341ad676cb57baf9abe518fa618c0c6a60af7a052"}], @NL80211_ATTR_IE={0x16d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x1f, 0xc7f3}}, @perr={0x84, 0xa2, {0x1, 0xa, [@ext={{}, @device_b, 0x197, @device_a, 0x4}, @not_ext={{}, @device_a, 0x5, "", 0x5}, @ext={{}, @broadcast, 0x3ff, @device_a, 0x15}, @not_ext={{}, @device_a, 0x7, "", 0xf}, @ext={{}, @broadcast, 0x200, @broadcast, 0x6}, @not_ext={{}, @device_b, 0x8, "", 0x26}, @not_ext={{}, @broadcast, 0x8, "", 0x20}, @ext={{}, @device_a, 0x7fff, @device_a, 0x2f}, @ext={{}, @broadcast, 0x3, @broadcast, 0x16}, @not_ext={{}, @device_b, 0x6d6, "", 0x19}]}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x6, 0x0, {0xffffffff, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x10001, 0x7}}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0x97, {0x6, 0x39, 0x20, "7a0dc2b442381b9563c47b8bde7155aed5264893a138296925a7d0cc83304e6f24f755032859c6011352d96daaa328cb3b2416086bf04deb79fcf4a95ca8a730932aaaef73fd22c93b2aae223aa0532a908d769e57b73c5e52b0862441f42e5184144e76ebb48d98b3f4201018dae77f3ce1a30b34d221aca29382fb9160a0ec25433a555b7ce4a3aefadda4348c682a313c250a"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4a, 0xfc, "91e47a934aa318b6f7be3215648e34249245ab6dba189310e653d48e69469b5fabd506d7917c0b207d24f2d70056d80f753bdd5a0caa19fc4b74c5052a949a33b5c9b97af640"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0xb2, 0xfa, "d4c2672a339e0ec623d1d2f7e139307585f1513d6ec046faf29e21dbd757ac15b280f59d591f0fc22c77cfc6dddbd42ff0d3876cd54f9f951fa0576b8bd4c0f488e5befb0d1ff918de8bc6be3e22516607c1e0c5e08b3643a7d1ecc1cc144f49d802e2f8a58d3d6166c4d342c86d67dc31161712905cfd11dc421a67581bfe9c02de568ece2b898e5b155b04cf2ef46e7329be210de8da3bf24ff3359df59724c7670f0f8d7d544c86b37ab1d876"}, @NL80211_ATTR_FILS_ERP_REALM={0x44, 0xfa, "8fc2c4057f41aae6e743d07fde7dfcbd46bf92bd1b5dafe7c65ead87a219a8637b6e31cac98f0bb5966523cbde0ca757449d6e9300b4595eae13f7c8ed34b68e"}, @NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "3e0f287c9c6eed228895b630d0b350ff7d25b1b39aa31d1981061e4da08917a07ef57cd1badfd896963b8f93c47b08e27b74fc8f05425b6c4f5e125b171baf0fa231794732348609a571bbfe98594c00e9e47085f01d72fe47b2a8928a66ee730bb74ae36091be280982dfbdd116bf3480837aec19c9579bb72530c023a025e150b2"}, @NL80211_ATTR_FILS_ERP_REALM={0x7e, 0xfa, "aab94bb9c522b9ac0e9e98a68b239357e27ee8942d9de1358306a8f7fa2f928a322a125ad35338e7f94fde45252a4e7157830db0468f7635d6b4522ca150323b3ffaf7cb2116b50666ebdb169454942cf3e772d35745b23c6dc8c1aedde9694525dc359c1bd35e4c8a9d163752480f186203d329401c8ede598e"}, @NL80211_ATTR_FILS_ERP_REALM={0x16, 0xfa, "3eacb3542b813f18c8cff4a210e71105d980"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "240f6a5d2055bbb0296859f3dc09d0b2ff29cb83a94b5ce3b61460826bc5d1e0f1f1b0d9ea12ec74699ad2d76041b0494358fa33c128750c5c3763d84714c8dc5e3b96da34c5e0da297a51b658ad38c16bedf17b59e5821066774225b7c4b5e10f58db2701cb4a4c38114440834f18f5a72d8d894d0c1089e68008eb4ee5c311179a72589b"}], @NL80211_ATTR_IE={0x1ad, 0x2a, [@measure_req={0x26, 0x27, {0x0, 0x3e, 0x7c, "a9c6642e8ffe2d316afd104a12ad544a779e21b908d3674a4dcf56f5ddfd59d06dbf07da"}}, @measure_req={0x26, 0x1f, {0x7, 0x80, 0x4, "5113276732c50fd80d2352822892ad5b19b01e27f0802776c7d0088f"}}, @supported_rates={0x1, 0x3, [{0x6c, 0x1}, {0x48, 0x1}, {0x5, 0x1}]}, @dsss={0x3, 0x1, 0xb1}, @chsw_timing={0x68, 0x4, {0x5, 0xff80}}, @chsw_timing={0x68, 0x4, {0x0, 0xc552}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x3c}, @fast_bss_trans={0x37, 0x140, {0x1, 0x9, "4bfda21368348c981345010fee317d51", "47c8f140704eb7b7e8bfab5b317b194bf60a07a1c0a631550ce7e0695d389aab", "5b335fba262175bfbdd415b5fba27ea1449be6acf6881f63750e115004fc8329", [{0x3, 0x1e, "f52fd0875e5db0a5a823b37df8e699e5569bbe33ea388ea4fc2cbc3df60a"}, {0x3, 0x24, "676e056692fe46ef1569a456419843e8de14e934f2e6afdb4552798d986310f51ca1606e"}, {0x3, 0xe, "b7edfca6bde15ea6fdef3e09a24a"}, {0x2, 0xf, "a819b71b58f536f3962b589e00ba2e"}, {0x4, 0x19, "23787ecde1365e9fbb070f25f2eba549d2b92ab843d1a7e985"}, {0x3, 0x1e, "4d0ee57eb2b4247df6fcaf69ce1e37556b6c0e86390208ca3a3ba4fa1022"}, {0x4, 0x12, "7976cc73a1972206e6d1f256d2a2357d23cc"}, {0x4, 0x17, "32e172ed5e7bc6b50c7744e78c62542955e83acb56b3db"}, {0x1, 0x1d, "0e2c91723855874b143ec0fe834bb5494233d2f69bdb4183022d36d289"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE={0x67, 0x2a, [@ssid={0x0, 0x18, @random="9842050787044cc1eadca13ee391f4d8222b5708c12b1487"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x95, 0x78}}, @tim={0x5, 0x31, {0x0, 0x87, 0x8, "0932564a8667df3db2e5b69c14756fc606581a00816f744c0b2c28fbe67dc7ab87369bb9bbaed904bfd675469b4e"}}, @ssid={0x0, 0xe, @random="92f0f4f73ed11130d3e3c17843bd"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc7, 0xfc, "8351d2f59d16ada1c5fa4a93eb8ae37071bbef4fbb502ddf798fe1469fe03727ae88a939f8d5fdf128eeac62f9d60ee8b7f5e5323083865692075fc9527954d5bee0a507b7c9829448f34b243914d2dffb1531ea2877877d3ff748f14594cce664b51281ddde1e63f73774e3bd5357474973de5fbd8fd711adc873e8879e4a2143d30fb7589c3f8830d0a1cbf4491b47c76fae1fd3175b278f2088c42dddc2968387e450eb3190c2e569eb02b034a0011c9271c6773d246215570f374f4d244f6fb3c0"}]]}, 0x93c}, 0x1, 0x0, 0x0, 0x8040040}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4, 0x6}]}]}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x21c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 23:07:06 executing program 1: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180)=0x7, 0x4) sendto$inet(r4, &(0x7f0000000080)="2a26b993091ba695d15b90854e53c8f4b65b3a63b795a3350fb462383465aac093ed5229e42cd38a14914ad75e273b7ef18074f66b72ce5108271421e55c1d6e950a062438fb2f9ac84330a0ce45242050ac622279bf8cbb243c526c365b2e7d7688312c9f057ef0c10dcd5088b874dcb0a23524b649d83279ccc73856232b01c03643ec7b49b6de6425d9aeb930ef3365e7df531716cc155d6f2f0608467f9496d1c41ad163ad", 0xa7, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @local}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x3b04, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 23:07:06 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 337.725146][T11021] sctp: [Deprecated]: syz-executor.2 (pid 11021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.725146][T11021] Use struct sctp_sack_info instead [ 337.743559][T11018] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 337.815966][T11028] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 337.881999][T11029] IPVS: ftp: loaded support on port[0] = 21 23:07:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x1}, {0x80000008, 0x0, 0x0, 0xfffffffe}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:07:06 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x280000, 0x15d, 0x14}, 0x18) r1 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000001c0)=""/5) msgctl$IPC_RMID(0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) geteuid() bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000300)=ANY=[], 0xff42) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 23:07:06 executing program 2: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x83, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) dup2(r1, r0) r5 = accept4(r1, &(0x7f00000013c0)=@nfc_llcp, &(0x7f0000000340)=0x80, 0x0) getsockname$inet6(r5, &(0x7f0000001440)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001480)=0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x0, 0xa50, 0x0, 0x6, 0x9, 0x0, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)=0xff) rt_sigprocmask(0x2, &(0x7f0000000240), &(0x7f0000000280), 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x3}, 0x0) io_uring_enter(r2, 0x2039, 0x0, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/173, 0xad}], 0x5, 0x1, 0x16c20624) socket$inet_udplite(0x2, 0x2, 0x88) 23:07:06 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:07 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0x8c, 0x2, &(0x7f0000000180)={r0, r1+60000000}, &(0x7f00000001c0)=0x1, 0x1) futex(&(0x7f000000cffc), 0xc, 0xffffffff, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f0000000040), 0x4, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) exit(0x2) 23:07:07 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 338.773789][T11092] IPVS: ftp: loaded support on port[0] = 21 23:07:08 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x2) unshare(0x40000000) keyctl$session_to_parent(0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x5, 0x8c481) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) pipe(0x0) r1 = socket$inet(0x2, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x119000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0) 23:07:08 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:08 executing program 0: dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="94000000010101020000000000000000020000000c0019800800020002"], 0x94}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 23:07:08 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast1}}, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x10, 0x1, 0x1, 0x7, {{0x6, 0x4, 0x3, 0x21, 0x18, 0x64, 0x0, 0x64, 0x4, 0x0, @private=0xa010101, @empty, {[@ra={0x94, 0x4}]}}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460209515b018000000000000002003b00060000006701000038000000f10100000000000009002000010020000000ff0700000000020000000800000009000000200000000000000008000000feffffff000008007fc6c15fc2c9237e20fdbe00aff37ea6105346090b999dff4657afcf837282eca4ceb4084be4cc485edbf989bb030069ff1cee796c403517135ba73880ac21f8d075b2a0a1f709413c956f3523b01f86eb1fa61bd16ba6284df25a9431e7e87757a7b18b8138d0d45d7d337072f9dcbe26f75dc3900545fbbf60d5d95f7cbd5f5acd5826aaa121a9f79dfdf45ed88f882f65daf9a61b9eab1e7fc6699a9a2062fdc38c3644a031c1d07014d03faeca1d2c891864f50143a5aa7bf7098210058e00bd3495d24e028c150057eb9d66caccadcca0792f9d54ca755329c2938ec8e4ef6f71513a9050281d3500"/578], 0x242) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x191af0f3) 23:07:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb9100a480e002e000000e8bd6efb250314000e000100240248ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0xa}, 0x0) sendmsg(r0, &(0x7f00000009c0)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x1, @empty, 'bridge0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="256c9ed9726692afe68844b28c76d9723a0473afa7d3362095ccae7d83af5073967f30cb7d3a7f01b879c84b4b03ef5f1f06e32bcf1bc4c508cfba9b0c2263b822dd2ee434edc15e783c37e2fbc54c", 0x4f}, {&(0x7f00000004c0)="1ab9622f6eaea3dba229722b3b8c7122c0877c0fbfe919a941fe20750acda3d0f5b55dd42b6430feb9446bfa6d196d5ef25de4982c95d7759d45b9cce3a4a8b0da6b0b383411c2", 0x47}, {&(0x7f0000000540)="10fc063d47ab741c81cbcb5d0beba1d963617fd542ddea9a94f5fbb9a5b251093483e924b3b1f756b59bd94c866624d0e27742e34aa9442924c5ccf6bbc5b4b8925ca892f63168a9276e0ca39c54f86567128ba94e25c87afcbf6c39b729d04a6469c0afb4b7526590c17a9d735481bf510abf660eb127c315c5d3c80b1406ba3bbea37878b8f435bd7424bfd909a85e1fb9d307bd6fb1a99745", 0x9a}, {&(0x7f0000000600)="e47a88828ff06aa9d6e44751a9ca7df6f7031f83eb767acfeff38b5364f4caa5f8d0ceb3", 0x24}, {&(0x7f0000000640)="89ecfd39fb5ef709b99df4d0fabc9e68ebc9ed36eb6ba97d99eed047251f", 0x1e}, {&(0x7f0000000680)="067a8c98cfd9840f1893943c0fcab6f77269bf618bdcd683dabf1866514677a3f18f8941d22362c0959d7d7c3345f1f722572ee94d4d3794ded7b034e8aa919872bd420eb40b61c3ec338d64946057b0fb887d2853d48c7e6ec18d7df347f94d1578a1603c6db5dcb2a31ef81738728e1d6d0094dc3ee384417447852e8775c38498b0724da908e397369aa07f01cc113a115db98df418cc8ddcbe9e7dbfc67528228957d71aeebc2fb91038ea8801560d4d196a01e93d39", 0xb8}, {&(0x7f0000000740)="f45d952b7e2f445cf4eca17e38d93ddd25f84977214522752220d6fade659cabbd703b9be66ec865f2e514da53eaab5d448c321a22fd9ba40c327f8cd5681a787f4a3035e7", 0x45}], 0x7, &(0x7f0000000840)=[{0x60, 0x14, 0x5, "a85c94e153c9b4a0b69fc8ed9325569dac23ea5512bbbcbadeb27785bebeaaf2b9b081c73e62be10a9b7c0b613b8a9d43ea83666e0d6dcf7253fb64d618e281a173a193b607d309f88"}, {0x100, 0x110, 0x8, "ab011bb37b5a6098efaa278083d9944d3028c64cb41afe55801e0339efcc5f3a49cf251ad8a90403c952ae1f2ca66e064ebb35a06a1d89a4b57d0990c6f893da7a7ef05dbe36e0600a70ba51464e23cdd5b471e84c6de17c7e33beb6758877a5859131b258577f07e35146aa401c602659a70923a246e6a8fe2e74abb3369cbd494f6024eeb57dd6494d0e32de2ac6ae1fef59a4e71ce805aad31732581930f258957ec73a315351eda499c52cb0e342914671ebbbac3a7f28f293e383f373d98ad956e9388c2d1a97dc86b1a902a0ee904de389707abfd00071bcf8a651b0b93b643333b8cd471fac"}, {0x18, 0x10e, 0x3ff, "1722"}], 0x178}, 0x42000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/174, 0xae}, {&(0x7f00000001c0)=""/221, 0xdd}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x2) dup(0xffffffffffffffff) [ 339.636660][T11141] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.855009][T11152] IPVS: ftp: loaded support on port[0] = 21 23:07:09 executing program 0: r0 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sNL\\\xc0\xe7ZX\x8d\xddx\xc6\xb6P\x1d\xfd\x90\xd1l@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\x0f\xfeA\x02Y%j\x04n\xe3\xa0\x03\xde\xd5\xfb\xb8\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(=\xafVD6BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*-/\xa0\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2e, 0x14c) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x2, 0x4) sendfile(r1, r0, 0x0, 0xeefffdeb) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12142, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) 23:07:09 executing program 0: r0 = socket(0x10, 0x3, 0xffffffff) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x3ff}) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)) write(r0, &(0x7f0000000080)="240000001e005f001bfffffffffffff8070000000000000000000000080009000e000000", 0x24) 23:07:09 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:10 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "572e835bff42f03a626e7bbc0011f3dec305b5f6c8c923020cee02ace57e7ecf1a4d905c82924351d52da1af56307d661655c22043e9b1637fddc3311dee5b7ab8f9b85f8d5527e6f6e67adc43cba65f3ded52cf4484e9431bf36c08ca04c8bf6058df795ec67359b43d7f09930ae517124bdbe271023dd82d382d721cd621072c36c80777c1c675e0c769c1100633f1ed8050cdb2e14ed82df14d286ba24a73e7464348efae7e7f65be09250eb900135bc07a290a74b9ded4574961dcdaf375efe2eca1b896650dc19b61f1fe9dd45bd064811f1829ef88369e827eea438ef96aa83f6b1a477f0eb3ba2f648ec99d33348a3c862bfbfb19f17801d6439ef888", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb9100a480e002e000000e8bd6efb250314000e000100240248ff050005001201", 0x2e}], 0x1, 0x0, 0x0, 0xa}, 0x0) sendmsg(r0, &(0x7f00000009c0)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x1, @empty, 'bridge0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="256c9ed9726692afe68844b28c76d9723a0473afa7d3362095ccae7d83af5073967f30cb7d3a7f01b879c84b4b03ef5f1f06e32bcf1bc4c508cfba9b0c2263b822dd2ee434edc15e783c37e2fbc54c", 0x4f}, {&(0x7f00000004c0)="1ab9622f6eaea3dba229722b3b8c7122c0877c0fbfe919a941fe20750acda3d0f5b55dd42b6430feb9446bfa6d196d5ef25de4982c95d7759d45b9cce3a4a8b0da6b0b383411c2", 0x47}, {&(0x7f0000000540)="10fc063d47ab741c81cbcb5d0beba1d963617fd542ddea9a94f5fbb9a5b251093483e924b3b1f756b59bd94c866624d0e27742e34aa9442924c5ccf6bbc5b4b8925ca892f63168a9276e0ca39c54f86567128ba94e25c87afcbf6c39b729d04a6469c0afb4b7526590c17a9d735481bf510abf660eb127c315c5d3c80b1406ba3bbea37878b8f435bd7424bfd909a85e1fb9d307bd6fb1a99745", 0x9a}, {&(0x7f0000000600)="e47a88828ff06aa9d6e44751a9ca7df6f7031f83eb767acfeff38b5364f4caa5f8d0ceb3", 0x24}, {&(0x7f0000000640)="89ecfd39fb5ef709b99df4d0fabc9e68ebc9ed36eb6ba97d99eed047251f", 0x1e}, {&(0x7f0000000680)="067a8c98cfd9840f1893943c0fcab6f77269bf618bdcd683dabf1866514677a3f18f8941d22362c0959d7d7c3345f1f722572ee94d4d3794ded7b034e8aa919872bd420eb40b61c3ec338d64946057b0fb887d2853d48c7e6ec18d7df347f94d1578a1603c6db5dcb2a31ef81738728e1d6d0094dc3ee384417447852e8775c38498b0724da908e397369aa07f01cc113a115db98df418cc8ddcbe9e7dbfc67528228957d71aeebc2fb91038ea8801560d4d196a01e93d39", 0xb8}, {&(0x7f0000000740)="f45d952b7e2f445cf4eca17e38d93ddd25f84977214522752220d6fade659cabbd703b9be66ec865f2e514da53eaab5d448c321a22fd9ba40c327f8cd5681a787f4a3035e7", 0x45}], 0x7, &(0x7f0000000840)=[{0x60, 0x14, 0x5, "a85c94e153c9b4a0b69fc8ed9325569dac23ea5512bbbcbadeb27785bebeaaf2b9b081c73e62be10a9b7c0b613b8a9d43ea83666e0d6dcf7253fb64d618e281a173a193b607d309f88"}, {0x100, 0x110, 0x8, "ab011bb37b5a6098efaa278083d9944d3028c64cb41afe55801e0339efcc5f3a49cf251ad8a90403c952ae1f2ca66e064ebb35a06a1d89a4b57d0990c6f893da7a7ef05dbe36e0600a70ba51464e23cdd5b471e84c6de17c7e33beb6758877a5859131b258577f07e35146aa401c602659a70923a246e6a8fe2e74abb3369cbd494f6024eeb57dd6494d0e32de2ac6ae1fef59a4e71ce805aad31732581930f258957ec73a315351eda499c52cb0e342914671ebbbac3a7f28f293e383f373d98ad956e9388c2d1a97dc86b1a902a0ee904de389707abfd00071bcf8a651b0b93b643333b8cd471fac"}, {0x18, 0x10e, 0x3ff, "1722"}], 0x178}, 0x42000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/174, 0xae}, {&(0x7f00000001c0)=""/221, 0xdd}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x2) dup(0xffffffffffffffff) 23:07:10 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x5}, 0x8) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "24c68e45686800d5c5c16dc7d010fc7d0cc2f6c1"}, 0x15, 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="111f04d6e5f7bb3a6fa6003d5d3f3d46", 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x9, {{0x2, 0x0, @empty}}}, 0x88) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 23:07:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1e, 0xfffffffc, @private0}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f00000000c0)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'wg1\x00', {}, 0x1f}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x3) 23:07:13 executing program 2: clone(0x908000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b8, 0x320, 0x238, 0xb0, 0xb0, 0x320, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x0, 0x60}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@udp={{0x30, 'udp\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/nvram\x00', 0xa4000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000a00)=ANY=[@ANYRES16], &(0x7f0000000b00)=0x3f) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x370, 0x0, 0x208, 0xffffffff, 0x208, 0x0, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @loopback, @gre_key=0x1, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @gre_key=0x8, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast1, 0xffffff00, 0x0, '\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x32, 0x2, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}, @ipv4=@remote, @icmp_id=0x66, @gre_key=0x6996}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}, {0x7, 0xe2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x5942, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r4, 0x0, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f00000009c0)=0x401) 23:07:13 executing program 1: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd8, 0x1403, 0x300, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x41, 0xf6, 0x17, 0x20, 0x249c, 0x9008, 0xaf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x72, 0x71, 0x59, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "23737ccbe1f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x11, &(0x7f0000001000)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x220020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xe, 0x7d, {0x7d, 0x21, "fdf70dc5c543c9e85ff04ca27531223c1996ce28a6d54fc053959c3c0ff02ee1b2d0ca3aefc304ff7ee155b00686b91acc1f58e9407edbb27ddaad1fe85bb282bcd8aa87588fe064a5530a9ba1bf4a51c65a29c606793787dff5ca68e9f71d8ec66909f0dea4c32147b2b9383fd164412bb58ad62b1ec36b75444c"}}, &(0x7f0000000180)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "45b56b4ea96addd1a4e95bb721309d5a036e2ba686c4bb98c67ecf1de8f6b91952627a6a834f10b4f5b2a16e150905a3c96eb7ef7601a7a8c7c80005a5eba48f167b417af841cefdadd9f3fe0c6104d8d03c8fa37fabb203fd7d07c7156c6001ab491c328ecd6817963e970a8525c41c7fd211f30994c80c763f1acb97bd0edee3473e28427a13cc432696f98b2c6a71d7c4367083d5ec81a91604044c4a70cb738077a4059efb8e77a0f72b642a0868fbed30476b8e4bd6ad4c96f809739b0e037720749cbbd83b4a6c84d59f6c3547cfec0070d40daadeb926710dd4908baa8b1029"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0xc1, 0x88, "f81ba634", "55a4cc7f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x8, 0x9, 0x0, 0x3, 0x7ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x9, 0xa8, "19c840a26113bd181464b7257f10150e3783166a3d356a9b1ee05db60257ac0a30657a35ca29d20d6bbadc0655eb21a08c421d44433c8f8e1e4979a397be302bed081837f60aac68dd4121f5260d1ca17c41bfafcc739522b1b3f5d29d449752f1317d1b2b13296aa43ca234a0559605f3e28958f043d528c207b51d76e5f4d3462515f82625422559d83c9d5d538db55ac46c8d3a71fde1a8b6877913864dbe8761c3333eddb1c6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x1000, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000540)={0x40, 0xb, 0x2, '~o'}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "d8d0"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xc8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x36}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0xe, 0x48, {0x48, 0x30, "e99f0edad8d8f527b07624118b681ed48c7c9cad1ed3463b8c6ebb768a85bb09debafe23be787d64f2e3c008a3532838ee62f14d543bd033a9609a1bb042353a73245a62364e"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000bc0)={0x0, 0xf, 0x78, {0x5, 0xf, 0x78, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x9, 0xf000, 0x2, [0xf, 0x0, 0xcf, 0xc0, 0xf, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x6, 0x5, 0x96}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x57eb482, 0xf, 0xd, [0x0, 0x3fff, 0xff0000, 0xff3f30, 0x0, 0xff0000]}, @generic={0xe, 0x10, 0x4, "cbab3dbb8ac17b29ce2a88"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x80, 0x2, 0x1}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xff, 0x6, "357b59dd", "abb791aa"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0xff, 0x2, 0x0, 0x6, 0x4}}}, &(0x7f0000001280)={0x84, &(0x7f0000000d00)={0x20, 0x17, 0x100, "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"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0xb5}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "2e8f"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={[], 0x34}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001140)={0x40, 0x19, 0x2, "a7e6"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x97}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f0000001240)={0x40, 0x21, 0x1}}) 23:07:13 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:07:13 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 344.427382][T11229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 344.437920][T11228] xt_TPROXY: Can be used only with -p tcp or -p udp 23:07:13 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.504191][T11238] x_tables: duplicate underflow at hook 1 [ 344.561668][T11228] x_tables: duplicate underflow at hook 1 23:07:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5c, 0x0, @perf_config_ext={0x401, 0x3ff}, 0x11000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xaa, 0x0) 23:07:13 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 344.689432][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd 23:07:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x5}, 0x8) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "24c68e45686800d5c5c16dc7d010fc7d0cc2f6c1"}, 0x15, 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000000c0)="111f04d6e5f7bb3a6fa6003d5d3f3d46", 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x9, {{0x2, 0x0, @empty}}}, 0x88) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 23:07:13 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 344.910405][T11251] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 344.939438][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 345.149628][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:07:14 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000380)=""/148, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:14 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 345.370839][ T7] usb 2-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=af.4e [ 345.398984][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.474007][ T7] usb 2-1: Product: syz [ 345.504419][ T7] usb 2-1: Manufacturer: syz 23:07:14 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 345.561689][ T7] usb 2-1: SerialNumber: syz 23:07:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0xfffffffffffffe61}, @val={0xc, 0x99, {0x46, 0x73}}}}, ["", "", "", "", ""]}, 0x28}}, 0x805) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x100, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d51d8ed2f60960d1324a71eca94973e26360699bde7a15f6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e6a34bbd9992edb75d5f825680778648247d03177faf6099"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7bec69f70695b43042b8a62cf67008cfde1f05496c00c5d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f90343a53b3a0442d7deac26877a8698c99057f73490d7e4"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x10040010}, 0x20000008) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x3f, 0x0, 0x81, 0xf8, 0x8, 0x0, 0x0, 0x0, 0x40, 0xc0, 0x4}, 0xe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="66643daf", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c7573207e65725f69643d48dd2e661356f3ba1334a046502b993102704fa2d6319feb8eae1a556c8143270c3e977443c11dcf2185490ec0c8f17f0e8c2cf48fa22501fc31bab56c42e9bd2cd73ab554a9c95077b183534fe96178d9bf8b24e4b482fca3a662f4dae10516bb86c7ca103d6cbb", @ANYRESDEC=0x0, @ANYBLOB="2c00000100000000003d38faad5f2c4aacaba7527f24a4f37901c29bc52fb85d9d8b46cbf00eca07975e69c1c1779dd39c14db6e44da7fe3e094abe4e02b6ab47051fd34fab437503facfdd5d47deb0ec05c5bb7568aaa9f92", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xa0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "c8aef2df7b4b135550c8090b0470f5c9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "b93553d6631c7d4ef37f5d7a3a22b6d5"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5c}, @NL80211_ATTR_PMKID={0x14, 0x55, "d678d03bacbee6e221a5c41d198217af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "859e1d6d4d98e46d58d2cf1f798cc651"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x53}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x404c000) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r3, &(0x7f0000000000)=0x8000, 0x1) [ 345.622306][ T7] usb 2-1: config 0 descriptor?? [ 345.765801][T11273] IPVS: ftp: loaded support on port[0] = 21 [ 345.911491][ T7] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 346.308052][T11273] tipc: Started in network mode [ 346.325788][T11273] tipc: Node identity 9, cluster identity 4711 [ 346.337522][T11273] tipc: Node number set to 9 [ 346.436944][T11273] IPVS: ftp: loaded support on port[0] = 21 [ 346.643769][ T444] tipc: Left network mode [ 346.899044][T11303] tipc: Started in network mode [ 346.906865][T11336] fuse: Bad value for 'fd' [ 346.909459][T11303] tipc: Node identity 9, cluster identity 4711 [ 346.929562][T11303] tipc: Node number set to 9 23:07:16 executing program 1: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd8, 0x1403, 0x300, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x41, 0xf6, 0x17, 0x20, 0x249c, 0x9008, 0xaf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x72, 0x71, 0x59, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "23737ccbe1f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x11, &(0x7f0000001000)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x220020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xe, 0x7d, {0x7d, 0x21, "fdf70dc5c543c9e85ff04ca27531223c1996ce28a6d54fc053959c3c0ff02ee1b2d0ca3aefc304ff7ee155b00686b91acc1f58e9407edbb27ddaad1fe85bb282bcd8aa87588fe064a5530a9ba1bf4a51c65a29c606793787dff5ca68e9f71d8ec66909f0dea4c32147b2b9383fd164412bb58ad62b1ec36b75444c"}}, &(0x7f0000000180)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "45b56b4ea96addd1a4e95bb721309d5a036e2ba686c4bb98c67ecf1de8f6b91952627a6a834f10b4f5b2a16e150905a3c96eb7ef7601a7a8c7c80005a5eba48f167b417af841cefdadd9f3fe0c6104d8d03c8fa37fabb203fd7d07c7156c6001ab491c328ecd6817963e970a8525c41c7fd211f30994c80c763f1acb97bd0edee3473e28427a13cc432696f98b2c6a71d7c4367083d5ec81a91604044c4a70cb738077a4059efb8e77a0f72b642a0868fbed30476b8e4bd6ad4c96f809739b0e037720749cbbd83b4a6c84d59f6c3547cfec0070d40daadeb926710dd4908baa8b1029"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0xc1, 0x88, "f81ba634", "55a4cc7f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x8, 0x9, 0x0, 0x3, 0x7ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x9, 0xa8, "19c840a26113bd181464b7257f10150e3783166a3d356a9b1ee05db60257ac0a30657a35ca29d20d6bbadc0655eb21a08c421d44433c8f8e1e4979a397be302bed081837f60aac68dd4121f5260d1ca17c41bfafcc739522b1b3f5d29d449752f1317d1b2b13296aa43ca234a0559605f3e28958f043d528c207b51d76e5f4d3462515f82625422559d83c9d5d538db55ac46c8d3a71fde1a8b6877913864dbe8761c3333eddb1c6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x1000, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000540)={0x40, 0xb, 0x2, '~o'}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "d8d0"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xc8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x36}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0xe, 0x48, {0x48, 0x30, "e99f0edad8d8f527b07624118b681ed48c7c9cad1ed3463b8c6ebb768a85bb09debafe23be787d64f2e3c008a3532838ee62f14d543bd033a9609a1bb042353a73245a62364e"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000bc0)={0x0, 0xf, 0x78, {0x5, 0xf, 0x78, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x9, 0xf000, 0x2, [0xf, 0x0, 0xcf, 0xc0, 0xf, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x6, 0x5, 0x96}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x57eb482, 0xf, 0xd, [0x0, 0x3fff, 0xff0000, 0xff3f30, 0x0, 0xff0000]}, @generic={0xe, 0x10, 0x4, "cbab3dbb8ac17b29ce2a88"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x80, 0x2, 0x1}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xff, 0x6, "357b59dd", "abb791aa"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0xff, 0x2, 0x0, 0x6, 0x4}}}, &(0x7f0000001280)={0x84, &(0x7f0000000d00)={0x20, 0x17, 0x100, "989a0a7a77c4d533d5bba6bc3809447db0f800caa5f43aaf51dcb06816b665b964c9f549b0df886811634a53daf0a9c1fb60d7eb64709943ea8495a3b12c357e31cb6c227992c8416940eed81f6547462f4c754c6481ec08ed66abc87368c3713474e9f43464409724829b544d5e315dcd05d7bd1f9886696bd254bd6eba3b5752f85cd72d72b6933e3fb805096c53c580cc2f3579589efd658ac5ce787cbc7a878f1c06c876014fbc73cdb899bfffea63898c2586918d0c3df9dcf724376f8c6be3ca5427912ba548847ee53a3cf17962fe218963f4fb3109c294697a3974363c4cb48cc31ee5948b868ac7248bb5741f70bc89aba6e236f564108850e31aee"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0xb5}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "2e8f"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={[], 0x34}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001140)={0x40, 0x19, 0x2, "a7e6"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x97}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f0000001240)={0x40, 0x21, 0x1}}) 23:07:16 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="4ff78471d50dc915bfa5942322f9af39165af3a278afc3b8a433906d85e5339954aff429aa7b4793945753fca449af4bb0d83972c2abfcf6db195b63df9cdf52d83f424b83dcb46d6ab21c00226ed0548bc487a8a720a493bc7e3c203344325d556406bd8612f0f23f417c30ad5e75ca8b1f9fcb34d428618b", 0x79}, {&(0x7f0000000180)="08f438810d9391db6dd636f7ee3ec0fa20db2c13dafbb3da64c85a1ba4ca8d76c7ded676ea38242fc88dd304b5efaaf82e752fd6899756c23ed72de260840eb58403305a4f44f40d7573029ddba05889d88991cf6821fc7b2dd91d6ef48e7a921209cab12f7b256ce586b248f0b79c2e64af1a802fce8444867ace41e37427c1e15abbd15dd35becc42d41a5158a98a8f1943583f9fe5f0fe62dfe0ec2c6bc40ac395d4ebf4dec803b2c", 0xaa}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000000)="691ccb9a5ab240431f0181cbf355094e82b3050fd0a2fe5413fd95b6be20c3adb70a035b259378b0526820f23469cc55e86edd4101e868", 0x37}], 0x4, &(0x7f0000001440)=[{0x1010, 0x115, 0x8001, "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"}, {0xc8, 0x111, 0x3, "48c785b83d8f3ef57f46b0dd28714f7d1c3fde3adef4cae48fb6de79ef3b0c71729f4f78e4f8cea7483d2b49b68fd7aa05d358be4def72311f30c3dc69286e628e64138a103a0d37be5fd0c2dfe3a905db3e43b6d26fe09dde0de981caaefddb073d4aa9846a659c95aad3a7f5d4f801858f7ed629b84592001f9b63924005db613be6029661665f7d3d885b0b39685f36e91d8afcffa8a3b4bc83979c11dec5949d64fe5c762242ce594eafd4f09b7c8704"}], 0x10d8}}], 0x1, 0x4000011) 23:07:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0xb7, 0x0, 0x6, @ipv4={[], [], @multicast2}, @empty, 0x10, 0x1, 0x6e, 0x3}}) bind(r1, &(0x7f0000000440)=@xdp={0x2c, 0x1, r2, 0x2}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f00000000c0)=""/179, &(0x7f0000000180)=0xb3) write(0xffffffffffffffff, &(0x7f0000000d80)="827cdd78c443b24d44c586d37951c430bbbd631fe2719ca007eb084b3af7d021402a5b37356394be4f27df09410322143e8288b5820d044a7ee2fdda201404678a5ec1a2e52dc00ee8ad4bb1946ea0be61189f752845eeb89cb982bf7491277d7d0a3a93b9964da0e3dc8c3f9876b81b1ed3042d2de02305a4346a8e0ab245748277cdf2e0127c4412b319fe0007ac841303a862159e0998d4ca6d9cee94751f1a7885b4f59c948ea786cb90139c3acfc204671d18ca81d2a86fccc8f4141cdfeb", 0xc1) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) syz_io_uring_setup(0x87, &(0x7f00000002c0)={0x0, 0xe7c0, 0x0, 0x0, 0x15d}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f0000000340)=@v1={0x2, "d7e9545c79ccceb6682645"}, 0xc, 0x1) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x532) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x0, @dev}}) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 23:07:16 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:16 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0xfffffffffffffe61}, @val={0xc, 0x99, {0x46, 0x73}}}}, ["", "", "", "", ""]}, 0x28}}, 0x805) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x100, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d51d8ed2f60960d1324a71eca94973e26360699bde7a15f6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e6a34bbd9992edb75d5f825680778648247d03177faf6099"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7bec69f70695b43042b8a62cf67008cfde1f05496c00c5d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f90343a53b3a0442d7deac26877a8698c99057f73490d7e4"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x10040010}, 0x20000008) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x3f, 0x0, 0x81, 0xf8, 0x8, 0x0, 0x0, 0x0, 0x40, 0xc0, 0x4}, 0xe) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="66643daf", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c7573207e65725f69643d48dd2e661356f3ba1334a046502b993102704fa2d6319feb8eae1a556c8143270c3e977443c11dcf2185490ec0c8f17f0e8c2cf48fa22501fc31bab56c42e9bd2cd73ab554a9c95077b183534fe96178d9bf8b24e4b482fca3a662f4dae10516bb86c7ca103d6cbb", @ANYRESDEC=0x0, @ANYBLOB="2c00000100000000003d38faad5f2c4aacaba7527f24a4f37901c29bc52fb85d9d8b46cbf00eca07975e69c1c1779dd39c14db6e44da7fe3e094abe4e02b6ab47051fd34fab437503facfdd5d47deb0ec05c5bb7568aaa9f92", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xa0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "c8aef2df7b4b135550c8090b0470f5c9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "b93553d6631c7d4ef37f5d7a3a22b6d5"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5c}, @NL80211_ATTR_PMKID={0x14, 0x55, "d678d03bacbee6e221a5c41d198217af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "859e1d6d4d98e46d58d2cf1f798cc651"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x53}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x404c000) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r3, &(0x7f0000000000)=0x8000, 0x1) [ 347.407410][ T9337] usb 2-1: USB disconnect, device number 4 [ 347.546499][T11354] IPVS: ftp: loaded support on port[0] = 21 23:07:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x81, 0x9c, 0x39, 0x7, 0x0, 0x9, 0x2000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71, 0xa88ebb1e94f7cd4d, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x80, 0x3, 0x8000, 0x0, 0x5, 0xfffffffd, 0x80}, 0x0, 0x8, 0xffffffffffffffff, 0xd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffbff}]}, &(0x7f0000000040)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 23:07:16 executing program 2: perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x5140, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xfffffff8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)=0xfffffffc) syz_genetlink_get_family_id$ipvs(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x1, 0x0, 0x516, '\x00', 0xe79}, 0x0, 0x200, 0x4, 0x0, 0x0, 0x7fff, 'syz1\x00', 0x0, 0x0, [], [0x7fff, 0xfff8]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000080)) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], 0x1f000, 0x200000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x5, 0xdd, 0x0, 0x8001}) 23:07:16 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 347.900137][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 348.159344][ T7] usb 2-1: Using ep0 maxpacket: 32 23:07:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x81, 0x9c, 0x39, 0x7, 0x0, 0x9, 0x2000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71, 0xa88ebb1e94f7cd4d, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x80, 0x3, 0x8000, 0x0, 0x5, 0xfffffffd, 0x80}, 0x0, 0x8, 0xffffffffffffffff, 0xd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffbff}]}, &(0x7f0000000040)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) 23:07:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:17 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 348.422476][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 348.639472][ T7] usb 2-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=af.4e [ 348.648565][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.749277][ T7] usb 2-1: Product: syz [ 348.753504][ T7] usb 2-1: Manufacturer: syz [ 348.758120][ T7] usb 2-1: SerialNumber: syz [ 348.816402][ T7] usb 2-1: config 0 descriptor?? [ 349.130994][ T7] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 23:07:19 executing program 1: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd8, 0x1403, 0x300, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x41, 0xf6, 0x17, 0x20, 0x249c, 0x9008, 0xaf4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x72, 0x71, 0x59, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "23737ccbe1f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x11, &(0x7f0000001000)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x220020}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0xe, 0x7d, {0x7d, 0x21, "fdf70dc5c543c9e85ff04ca27531223c1996ce28a6d54fc053959c3c0ff02ee1b2d0ca3aefc304ff7ee155b00686b91acc1f58e9407edbb27ddaad1fe85bb282bcd8aa87588fe064a5530a9ba1bf4a51c65a29c606793787dff5ca68e9f71d8ec66909f0dea4c32147b2b9383fd164412bb58ad62b1ec36b75444c"}}, &(0x7f0000000180)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "45b56b4ea96addd1a4e95bb721309d5a036e2ba686c4bb98c67ecf1de8f6b91952627a6a834f10b4f5b2a16e150905a3c96eb7ef7601a7a8c7c80005a5eba48f167b417af841cefdadd9f3fe0c6104d8d03c8fa37fabb203fd7d07c7156c6001ab491c328ecd6817963e970a8525c41c7fd211f30994c80c763f1acb97bd0edee3473e28427a13cc432696f98b2c6a71d7c4367083d5ec81a91604044c4a70cb738077a4059efb8e77a0f72b642a0868fbed30476b8e4bd6ad4c96f809739b0e037720749cbbd83b4a6c84d59f6c3547cfec0070d40daadeb926710dd4908baa8b1029"}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0xc1, 0x88, "f81ba634", "55a4cc7f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x8, 0x9, 0x0, 0x3, 0x7ff}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x9, 0xa8, "19c840a26113bd181464b7257f10150e3783166a3d356a9b1ee05db60257ac0a30657a35ca29d20d6bbadc0655eb21a08c421d44433c8f8e1e4979a397be302bed081837f60aac68dd4121f5260d1ca17c41bfafcc739522b1b3f5d29d449752f1317d1b2b13296aa43ca234a0559605f3e28958f043d528c207b51d76e5f4d3462515f82625422559d83c9d5d538db55ac46c8d3a71fde1a8b6877913864dbe8761c3333eddb1c6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x14}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x1000, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000540)={0x40, 0xb, 0x2, '~o'}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "d8d0"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xc8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x36}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x0, 0xe, 0x48, {0x48, 0x30, "e99f0edad8d8f527b07624118b681ed48c7c9cad1ed3463b8c6ebb768a85bb09debafe23be787d64f2e3c008a3532838ee62f14d543bd033a9609a1bb042353a73245a62364e"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000bc0)={0x0, 0xf, 0x78, {0x5, 0xf, 0x78, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x9, 0xf000, 0x2, [0xf, 0x0, 0xcf, 0xc0, 0xf, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x6, 0x5, 0x96}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x57eb482, 0xf, 0xd, [0x0, 0x3fff, 0xff0000, 0xff3f30, 0x0, 0xff0000]}, @generic={0xe, 0x10, 0x4, "cbab3dbb8ac17b29ce2a88"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x1, 0x80, 0x2, 0x1}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xff, 0x6, "357b59dd", "abb791aa"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0xff, 0x2, 0x0, 0x6, 0x4}}}, &(0x7f0000001280)={0x84, &(0x7f0000000d00)={0x20, 0x17, 0x100, "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"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000ec0)={0x20, 0x0, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0xb5}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "2e8f"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @dev={[], 0x34}}, &(0x7f0000001100)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001140)={0x40, 0x19, 0x2, "a7e6"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x97}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0xa6}, &(0x7f0000001240)={0x40, 0x21, 0x1}}) 23:07:19 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r8}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1f}]}}}]}, 0x40}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getneightbl={0x14, 0x42, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004090) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private}}}], 0x20}}], 0x1, 0x0) 23:07:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:19 executing program 2: ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000100)={0xfffffe00, 0x5, &(0x7f0000000000)=[0x0, 0x4, 0x351, 0x0, 0x2], &(0x7f0000000080)=[0x7ff, 0x3, 0x6, 0x4, 0x5, 0xfff, 0x3, 0x473b, 0xfff, 0x613], &(0x7f00000000c0)=[0x40]}) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x2}) 23:07:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 350.551126][ T5] usb 2-1: USB disconnect, device number 5 [ 350.748937][T11467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 350.774658][T11460] input: syz1 as /devices/virtual/input/input5 [ 350.878850][T11471] input: syz1 as /devices/virtual/input/input6 23:07:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) 23:07:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_io_uring_setup(0x7e2f, &(0x7f0000001100)={0x0, 0x5c71, 0x10, 0x1, 0xdd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001180), &(0x7f00000011c0)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001200)='/dev/adsp1\x00', 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001240)='/dev/mISDNtimer\x00', 0x80000, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) r10 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001800)={0x28, 0x0, 0x2711}, 0x10, 0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000c80)=[{&(0x7f0000000280)={0x298, 0x19, 0x8, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x58, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6d, 0x0, 0x0, @pid}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x7}, @generic="8eeaad029a6e03c1cb7a84e614f244105df6c22c055e14303cf116e0b1f5e2bfd4515b63f22134658266025c6ac7697219923bdae6586a550b17ca35aa9def780490149003ee4911e0656ab558a8a14f0fadbb59adb7a96e0ca4095662c92fd2714f24bdd094fd08940629790a7ee255afc23818c26d55c2afcf10987a265e8a3c73d564543620ecc3f5328f607e926a6426e1e297dedb7a5a682faec51e3b87c28099f60d6ce44f07cd835819e4558f576118023a8111bb6dba37b8b75f0ddcb904e4d6a1e2b0882a6324", @typed={0x8, 0x95, 0x0, 0x0, @fd}, @nested={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid}]}, @nested={0x80, 0x2e, 0x0, 0x1, [@generic="7793ea1931ed0ae76fd14f033e029ed9933f1992ddea60d0de8f114f081cbc39b09d27af3c1263a91638c2b908699d213c21f2a5bf789629160922a1b779df582b7aa1d6f06ac09d17f9bb69980243ba67aa4060903c811b43d23213d6056c2799cae8ebd53fb40285ba788d7ff18b1458a92e5f3f4def0eab6127ce"]}, @nested={0x14, 0x53, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x6f, 0x0, 0x0, @uid=0xee01}]}, @nested={0xb2, 0x1d, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="8d896c924b06b22cf31b467f94752afdad464dcf480bfd25387135993165521f4f8d2c92e736154fb251cca4c029c1ae3d038457af22b1ec014991e1c15d620a01ae61e612ba11854357130ad24d6e4a7147b928a802f1451bff4727840ac4e1be9aab7e831c6b0e0d86407b1e758d163e4dc5012d57f84345902a5607fd7a19139550b61763c6da0e97e7ccfa47e2337e00f478294d", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@empty}]}, @generic="43e17d1c705780521caa4c04ec4da6a31dce3b643bae989c42d7ad2f9b6617eaa2082174c7d12d54fd6dd93b40e9d6278c0b5d7aa46cfc78f61878683da961c92655a20c49e8"]}, 0x298}, {&(0x7f0000000540)={0x28, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}, @generic, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0x3f}]}, 0x28}, {&(0x7f0000000580)={0x268, 0x38, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@generic, @nested={0x8, 0x90, 0x0, 0x1, [@generic="ee59aaed"]}, @typed={0x11, 0x1d, 0x0, 0x0, @binary="d7f01e8ab22f888f85e8a2d735"}, @generic="5b8944db3d6e248d5fe2dcf750c8a9af4991a01399c5ed78082b57795ce0d830dbb1c40ac127e9b890d805769935a462f7dfec78e84524f9ca3b", @generic, @typed={0x4, 0x2c}, @generic="da697b574b81c45362b8e920f8d0f48ea3d810f86ef593ffa8d436cb800f7ae4b346ad3328d9e0ae0d202b1de78a1436808ebd7b3cb12a3699b0e6796dcd079b1769076d9b46326805175420048535b168c23c8300a3890dd30a2bb4f745b48a1b84e92aa2", @generic="7bcd2bef52a9c213fea2166c6787752ac1aad680221b0cd1f79e8d3c3e99e37e0dab86ffacc72adba926fe054be3a5e420ac5af0269f45ac370a9c10c5e2630ceca5e06da09b73512f04285dff9ed301cda1cb7f38cf344e2ab461df9408bcfc09cf0be2ff47065e4eea2a68072d2ad813b37a358350bda2710387e2af3f23d4bc396ea73bcc51a7cc8b2ef126cfac", @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@loopback}, @generic="c4fe9ff56f9a7859f73f553a90af5221f47a739108097cbdb73bd284552c69c576e51b53203bb7cdb51d028181116fd7717cf0e5ce5ab84ea2ffd988af32420edf7e33078922b956a32f2723c682110743aa5e1e8fbd5daee6ffd8be6448cde8d1f61387bb3634d6e23a0abd39038b80a9643fea1a561d9eeee3d51fee22d9724eb663983fad15155bb5adf5264f211202e8d8486f2735ada58a7715a6cb5ad6539d3a2509623c1aa05060c7dc18d7c7d5c4a590f1d703c17ecfe908f685d57c18300705b7e966d0549c42368da9a3c3883bf02044bebd289f60b7930c4d5fae4a52db55b7698f2e3e365cbf6a073bba7c67cf1720f8"]}, 0x268}, {&(0x7f0000000880)={0xfc, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="91c822a1ef9fcc30c3ece6e1f37bbc5f82d99e906cad361a362aec5f9eac2b26b250035a7ff9606d8a581d9675bb205921c63ad07f55d56fd892560db7a30b7bd7d2bc7d98a37b1204d65b", @generic="3f888d523c8ad7e8b6d23e60e87aca4a523c45aebb9581b7f162dc6b2eb6846b0802e131d56e71939a2bd404a8e7664a12ac7b1cb0731fb562c296537a08ff2c6873ac6a5f0d4cb3", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0x52}, @generic="565092d07f4480c6d47d7200755e0c4aa6dadbdd85d90473a24c3bd072cb42874196e77720f085e8044987b598583104936bfe3646de", @typed={0x8, 0xa, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x6e, 0x0, 0x0, @uid}]}, 0xfc}, {&(0x7f0000000980)={0xd0, 0x23, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="ea873c37bf63aee7b0a978fee184b3c28598669c90f502263d83d5ce1212b82852cd33f850ce376a51bb45458d0e0e2d152098b44604cdeb850a0afbccbd1703c961394de81e9b52c6c1518330aef721c6dc3ab383dbeff06dcb031e4cd896e63874cad9fed9268feac621926a37cbb1fb668f41daf8ae639b0ed7892bb0790f4d7dffbf9a963bad269ce26faaaa9c61224fd05a000a721a8b9bef60284f41622094dd446f1adf569e559d2b737b", @typed={0x8, 0x64, 0x0, 0x0, @u32=0xfffffffb}, @typed={0x8, 0x2f, 0x0, 0x0, @pid}]}, 0xd0}, {&(0x7f0000000ac0)={0x1a8, 0x2e, 0x100, 0x70bd29, 0x25dfdbfd, "", [@generic="bb451fe358c2a750f4626daf43bb583ddfe5cf78ea9062850c54b5122ec0c5f3dafec6a81ba2cecebcce05894f5e8736cf90dc80f10ba61ea9acacd00fee53321791e8fedae555075573ae33a8c4987290a76bf7945636c98dfeb8f21b3faf344a952569db562bc0450f20", @typed={0x7, 0x19, 0x0, 0x0, @str='}\xcf\x00'}, @nested={0xc, 0x68, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32=0x6}]}, @nested={0x56, 0x8c, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xf, 0x29, 0x0, 0x0, @binary="c52e82cef9ca42e302c956"}, @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x2}, @generic="1a5920d2265a04c277f6e533f82556906ee64495dfe7", @typed={0x8, 0x2, 0x0, 0x0, @pid}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x80d4}]}, @generic="2374f5ee3cc4628f36bf42a96a3deb05cad4a2d8fa42d65b52621d2ee8fff6624ebffb0d480002e284a6f788a4162509eecfca1a7fc4c4a3f69b1c3689fa7e95d0d6000571bb33943d1e79a74ca21fc0bb190dc8243de0b56184888eb17e0799c0f75452513856b20d55d69aaa54b5458adeaf7ca58556590d98c53ec867e533e01b6a8035b4d97940c0724c6f20445053a9b30985f4be6ec9a3af569ec0169d2fdb5551e01d8f624bad319b64d7eec5130478bd28bf7562e7971b5f5873"]}, 0x1a8}], 0x6, &(0x7f0000001840)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r2, r2, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r6]}}, @rights={{0x28, 0x1, 0x1, [r7, r2, r8, r9, r2, r10]}}], 0x118, 0x40805}, 0x40040) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000079408743efb74ad172e16755258b4c1f1317d1ee8531949ec9ed08b822d1ff01731db7c023d9457a06bc20fcebae7a70dfc29d2ca7e55084615dcf28f7586c3cbb090d5ef06f8db17f67cf4c70d23ce7d6517b01eaaef45f16f19e53e8c0c94ea559e06d059a32cf0b73fa65"], 0x20}}, 0x0) 23:07:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 351.089259][ T5] usb 2-1: new high-speed USB device number 6 using dummy_hcd 23:07:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000000001010600000000000000000200000024000180140001800800010000000000080002000f0000000c0002800d00010032e04913fb6100000000240002801400018008000100ac14140008000200ac1f00010c00ea7f050001001000000008000740000000001c0005800800024000000000098002fbe53a9d669b8d93667d434471a0"], 0x80}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r1) [ 351.237320][T11497] input: syz1 as /devices/virtual/input/input7 23:07:20 executing program 4: r0 = openat$full(0xffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 351.342717][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 351.380228][T11505] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.396410][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.419828][T11507] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.429812][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.480405][ T3209] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 351.549490][ T5] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 351.743232][ T5] usb 2-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=af.4e [ 351.758862][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.778501][ T5] usb 2-1: Product: syz [ 351.783808][ T5] usb 2-1: Manufacturer: syz [ 351.799896][ T5] usb 2-1: SerialNumber: syz [ 351.832860][ T5] usb 2-1: config 0 descriptor?? [ 352.039552][ T3209] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.052114][ T3209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.071226][ T3209] usb 6-1: Product: syz [ 352.081104][ T3209] usb 6-1: Manufacturer: syz [ 352.099769][ T5] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 352.109728][ T3209] usb 6-1: SerialNumber: syz [ 352.170569][ T3209] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.839385][ T3209] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 353.255771][T11448] usb 6-1: USB disconnect, device number 2 23:07:22 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 23:07:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1f}]}, 0x5c}}, 0x20004040) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x1, 0x25, 0x2, {{0x12, 0x4, 0x0, 0x30, 0x48, 0x68, 0x0, 0x3f, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@end, @noop, @generic={0x88, 0xc, "88a7a9f0cbed2b5f66f8"}, @noop, @ssrr={0x89, 0x17, 0x38, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0xe9, [@local, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:07:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 23:07:22 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x18}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r7}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:07:22 executing program 4: r0 = openat$full(0xffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 353.737655][ T9337] usb 2-1: USB disconnect, device number 6 [ 353.796141][ T35] audit: type=1326 audit(1609974442.550:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11489 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 353.854109][T11551] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38846 - 0 [ 353.860058][T11545] input: syz1 as /devices/virtual/input/input8 [ 353.902758][T11551] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38846 - 0 [ 353.933827][T11551] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38846 - 0 [ 353.952377][T11551] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38846 - 0 [ 353.971612][ T3209] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 353.984444][ T3209] ath9k_htc: Failed to initialize the device 23:07:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 353.998340][T11551] device geneve2 entered promiscuous mode [ 354.014121][T11448] usb 6-1: ath9k_htc: USB layer deinitialized [ 354.043296][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.153362][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:07:22 executing program 4: r0 = openat$full(0xffffff9c, 0x0, 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 354.243680][T11584] input: syz1 as /devices/virtual/input/input9 23:07:23 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) 23:07:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r4 = msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x3, 0x3f, 0x8, 0x6, 0x0, 0x1, 0x24002, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3f, 0x5}, 0x0, 0x3, 0x0, 0x6, 0xffffffffffffffff, 0x2, 0x5}, 0x0, 0x0, r0, 0x4) msgctl$MSG_INFO(r4, 0xc, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000240)) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000070, 0x0) 23:07:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x30, r3, 0x61946000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x3f, 0x7e, 0x5, 0x0, 0xfffffffffffffffc, 0x40000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x18002, 0x4, 0x9, 0x9, 0x401, 0x7fff, 0x1000}, r2, 0x9, r0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x7f1, 0x4) fadvise64(r0, 0x0, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) 23:07:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 354.543946][T11604] input: syz1 as /devices/virtual/input/input10 23:07:23 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:23 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x18}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r7}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:07:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:23 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000009e00)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000001100)=""/200, 0xc8}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/80, 0x50}, {&(0x7f0000002280)=""/125, 0x7d}, {&(0x7f0000002300)=""/197, 0xc5}, {&(0x7f0000002400)=""/117, 0x75}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/15, 0xf}], 0xa, &(0x7f0000003580)=""/102, 0x66}, 0x814}, {{&(0x7f0000003600)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003680)=""/217, 0xd9}, {&(0x7f0000003780)=""/177, 0xb1}, {&(0x7f0000003840)=""/168, 0xa8}, {&(0x7f0000003900)=""/225, 0xe1}], 0x4, &(0x7f0000003a40)=""/255, 0xff}, 0x3}, {{&(0x7f0000003b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/155, 0x9b}, {&(0x7f0000005c80)=""/141, 0x8d}], 0x4}, 0x6}, {{&(0x7f0000005d80)=@tipc=@name, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005e00)=""/164, 0xa4}, {&(0x7f0000005ec0)=""/221, 0xdd}], 0x2, &(0x7f0000006000)=""/80, 0x50}, 0xffffffff}, {{&(0x7f0000006080)=@hci, 0x80, &(0x7f0000006380)=[{&(0x7f0000006100)=""/85, 0x55}, {&(0x7f0000006180)=""/72, 0x48}, {&(0x7f0000006200)=""/33, 0x21}, {&(0x7f0000006240)=""/96, 0x60}, {&(0x7f00000062c0)=""/148, 0x94}], 0x5}, 0x6}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/250, 0xfa}], 0x2, &(0x7f0000007540)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000008540)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000008800)=[{&(0x7f00000085c0)=""/221, 0xdd}, {&(0x7f00000086c0)=""/110, 0x6e}, {&(0x7f0000008740)=""/132, 0x84}], 0x3}, 0x400000}, {{&(0x7f0000008840)=@generic, 0x80, &(0x7f0000008c00)=[{&(0x7f00000088c0)=""/2, 0x2}, {&(0x7f0000008900)=""/114, 0x72}, {&(0x7f0000008980)=""/170, 0xaa}, {&(0x7f0000008a40)=""/110, 0x6e}, {&(0x7f0000008ac0)=""/79, 0x4f}, {&(0x7f0000008b40)=""/46, 0x2e}, {&(0x7f0000008b80)=""/27, 0x1b}, {&(0x7f0000008bc0)=""/26, 0x1a}], 0x8, &(0x7f0000008c80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000009c80)=@ax25={{0x3, @default}, [@bcast, @netrom, @bcast, @netrom, @remote, @null, @remote, @bcast]}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d40)=""/129, 0x81}, 0x833}], 0x9, 0x0, &(0x7f000000a040)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f000000a080), 0x4) dup3(r3, r2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x5, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x80000006}, {0xff, 0xff, 0x1f, 0x5}, {0x8, 0x9f, 0x1, 0x7ff}, {0xfff9, 0x5, 0x1f, 0x9}]}, 0x10) 23:07:23 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x1, 0x1, {0xa, 0x4e23, 0x80, @local}}}, 0x3a) [ 354.914605][T10294] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 354.916961][T11624] input: syz1 as /devices/virtual/input/input11 23:07:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:23 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:23 executing program 1: perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x22104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x93, 0x6}, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x1a1041, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)=0x24) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)="c5dc", 0x2) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r4, 0x5405, 0x2071dffc) [ 355.181843][T11642] input: syz1 as /devices/virtual/input/input12 [ 355.459556][T10294] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.468710][T10294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.477882][T10294] usb 6-1: Product: syz [ 355.482497][T10294] usb 6-1: Manufacturer: syz [ 355.487304][T10294] usb 6-1: SerialNumber: syz [ 355.530182][T10294] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 356.119181][T10294] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 356.597833][T11448] usb 6-1: USB disconnect, device number 3 23:07:25 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) 23:07:25 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x55, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x80, 0x7e, 0x90, 0x40, 0xc45, 0x610a, 0xfd92, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x44}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000001380)=ANY=[@ANYBLOB="00003900000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x3d1, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xe0, 0x9e, 0xb, 0x20, 0x6cd, 0x104, 0xad74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3bf, 0x3, 0x5, 0x40, 0x70, 0xff, [{{0x9, 0x4, 0xa4, 0xff, 0x7, 0x23, 0xd3, 0x28, 0x3, [], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0xcf, 0x9, 0x8a}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0xb6, 0xad, 0x1}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x81, 0x0, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xc81}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0xdcac}, @generic={0x32, 0x2d, "130006ef7f72c21c5572ac530bdf7f4891604933fe4ae3a5581d25e0d6928ba19b798a81f073e66c9f55f2c73ccf8e73"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xf9, 0x8, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x7, 0x0, [@generic={0x51, 0x31, "663f6c2f0ac5fe2a4ded883fcf93445e38e7418b75fe4ccb50e42f5b93cebd87717d4549d3e59da25edb881b717178e85d10fb9327cb49babd81d9febdb244eb3ae7004582c9610b2a2c453bac204a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x1ff, 0x3f, 0x1, 0x81}}]}}, {{0x9, 0x4, 0x23, 0x0, 0x4, 0xb1, 0x9d, 0x9d, 0x39, [@uac_control={{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x5, 0x1, 0x4, 0x3], 0x7f}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0xf0}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x1, 0x0, "107c7238"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x200, 0x2, 0xff, 0x5}}, {{0x9, 0x5, 0x9, 0x14, 0x8, 0x1, 0x8a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3f7, 0x9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0x2, 0x8, 0x410, 0x1, 0x1, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x4}]}}]}}, {{0x9, 0x4, 0xe8, 0x81, 0x7, 0x2e, 0x4c, 0x19, 0x8, [], [{{0x9, 0x5, 0x0, 0x4, 0x10, 0x10, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xac, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xe7, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @generic={0xc, 0x7, "58062430053dcd15f5ea"}]}}, {{0x9, 0x5, 0xe, 0xd36abdb1b23aa81e, 0x400, 0x1, 0xad, 0x1, [@generic={0x60, 0x9, "cd4ae7dc14811ebe6e0255f2e32abac46728e0845cfe1ea5e47c340246acc7fe416267ad20f62249ee07d4f31a0ae0d8de8686c99ef624c9ce61c4b15bd7dff07bb162c6b73e5ca1d0f2ffdf86ca22e6875e318f6bad503c57733c17f068"}, @generic={0xd7, 0x4, "4d29fc6744e708c701f9aca678e223c2d2aecff1fef71c9bd0a8444a15195efdc221b4b4f2ff7f7cca2605016fefc82e253eff88deaeaa5ba38fc85f9ea05412fee2fc92a691c0cd73a4e579922d4f12ee2968b63082a7113634818a2683c06aec8cbe7df62dc4e5e09a5d48dea8c14af11c5ce46620f65fdd5577dfdf38eed0887043f52dd50045e92b970c645ea51e7ad8f11aa1b6f0b5c855756e485e0cfaefff91388fba1d9d389e17ab2a6d918f646f62d0654df0840f7e9a9930f64ffa3d0d3fb2e1a1e81ce5933163784cfe13f14c09ec80"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x80, 0x2, 0x6, [@generic={0xc5, 0x21, "4a4b8088f2cda1e6658635ae999e119478f1feed198c57a62c63db743ed8e85d70a3757f42a7e75905c7dfc3610613b336ec3a5d4edb7d235e5a19099dd0333b6a7a6177ede8502cab21fbe5755312a2318bc500eebf12d90098ef4aed4360ea36eeda595f83f7b9b239e3614802ae43544f44631492455200655a5f8179f64c921c3e2a9eb1e6b33494b5e466d36fe7fa791a256a1ddd37ef192eecf8019b701ae64b8c04d609030d0ff9637ce2816760a88f7f2d7e1cfe16b2579bcde484f305bd34"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x1f, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xf270}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x1, 0x5, 0x56}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x37, 0xbe}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0x7a, 0x9, 0xc5, 0x40, 0x21}, 0xd6, &(0x7f00000006c0)={0x5, 0xf, 0xd6, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf01e, 0x7fff, [0xc03f]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x100, 0xf, 0x8001, [0x0, 0xf, 0x3fff, 0x30, 0xcf, 0xc0]}, @generic={0x97, 0x10, 0x4, "9faaf7f348ec47db6f7df84e0b6bf016e53fa1b3c01dcad65e853a4ff80ca39a9e9e80b8d96bed9be88a21e86f4ba4575d4909cdcbfde40b99fc306cc51dccb1994d74c6f808ebd31a77286bd9419c4837989e760822144bb1ab7122e8e198374dbf475fbc336f009733e5a2a27acb60a83ffc279fb12dd60efa35dca28d14d5c035f0c3dd723e0c1a527b055962d7fa23dc4b91"}]}, 0xa, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x420}}, {0xe7, &(0x7f00000008c0)=@string={0xe7, 0x3, "d40f0c976a938c2dee1a92e7a5b4619e3cc3c878d8982f7308379918dda305feef5abf61b20d9b3210d70f2d94684907e04547484940e96ee535b1c7c0dd5d81cc8da4c4b38c83cc6895848b3153d9d8b8287eacb5fdbdaee41457b38bc23a22a45016dc58a2b807ecac682a5cd6dea0dd8b996e32e456540b5ceaae5a518af7841c23a7e034f2ba087ae16d1c321555980f22a264a22d7351e54ebe5fc728350db517582fb4a5466c1e87b303120d2513901be1fbebc783b12463fc4d628cd29b15eea8539736e1e70a2b76110108961604881a2d68cb472b09620d22e88eef3107284d58"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x55, &(0x7f0000000a00)=@string={0x55, 0x3, "2e54acb8992fff1fbaecb949c660bd8709c41aed51d45a1dafa7a7d9b9e95e52156716652d0bfc8fc22617f8a390580199852b573b389a2c733c688f244087e893429643a67c761d5df23074cc1454e2a03ac2"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000080)={0x0, 0xa, 0x75, {0x75, 0x9, "769dff0b5f6484b09468241388f34d52fd3294a300272cdf550092dc42b65e9c515d731d4a3f68bee88907b4bc03010a15a1098905a1673d8e4dcbd066626343c97d32b48becd88e3553fc1a3e734994ab0ccdcaaffbb4aca6737810270ef999ca4983aec532c2ab9db581402b3f89ee8f84c6"}}, &(0x7f0000000240)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "d1cb28b84ef3a44c54036e218cad65df6e29929a12bd36bc0f2d2bd89bdfd7f29abc833b8aa85211aa832dfa7bf60aec5ef69b065945317d0994a6c7f1e1e637dc336ba2d6c5af0521d1c4bbd36798502a4f582e1fd24d1cf1496b962b2130527adc62ff743f72672e210cae68b3d3e19478edb67ef21303b89c53e0639d638c0f65b2eade174a24a26a205be097950b925f17c16d104cee85a6fa750fe137b25722ead0aebae387ab428045c4bc8134e349f54759fc6320f425494952fd34f6"}}, &(0x7f0000000000)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0x9, "6305b1c4"}, @global=@item_012={0x2, 0x1, 0xa, "6fe5"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x9, "48887de0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0x1d}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0xf, 0xf6, "d4e17549113b304ff640fb2eee23cd41f82116094386fa1fd92604dd25db8331b4d2173387a9696829935ec682679fe9de9ea7d888e3e6abc4931b246cbd678d25113deefe602188c4e24cf4a2fb983ac248d469a5586eb93629069ab0a4de22757d963c520c224cbc10ac8d222175ba982a6e9ef4caeecd8a4c1002fbbedd6978bbc77611de5254df87c2f31251ccbe35ac6b081adea99833fb33c7bfd25b72af77114ceb94ecd9dbb245c7c87acc73ea9f19d1399b71ad7257bdd89a208e6550ca6371682254c6a874afead103c5b8a356f02691c7832431544b6ff1dfaaf2425ff01079ced3b11f0704f5b6d8517567d3e0f34c9c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000480)={0x20, 0x1, 0xe0, "c29b58fab4622e4119779e9493c0be2de2790fa5cf2d74132482f943b38533d1a7d4d738dd5b469043afb86302f4dce175489a61947c532919b4236f9a5318e2036f0ca784f7dc65a74c54c6d519e5ba152ea9fe1a30726703b815a476465632734c83b51410391a78ddb5755d6693da889d1780a7f6200aa54e0f1f4b93e1b7c9ec9fc4a055ef3218e8a4015a015887afe5b9640f60fbc33639b0f7b524449e5deaf48cc42a53734c60d35e4009d45176312d9f557f170688b78e85b12bf411b8febdf2f1602f165b463a9feb4bdfcf46b19b5bc435b508e8ffd8d012b7fa46"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x3e}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002203"], 0x0}, 0x0) 23:07:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x18}}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "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", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_deladdr={0x0, 0x15, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x3f, 0xc8, 0x0, r7}, [@IFA_BROADCAST={0x0, 0x4, @empty}, @IFA_FLAGS={0x0, 0x8, 0xc4}, @IFA_ADDRESS={0x0, 0x1, @rand_addr=0x64010100}]}, 0x43}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 357.198367][T11680] input: syz1 as /devices/virtual/input/input13 [ 357.218497][T11679] input: syz1 as /devices/virtual/input/input14 23:07:26 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 357.249144][T10294] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 357.256304][T10294] ath9k_htc: Failed to initialize the device [ 357.286220][T11448] usb 6-1: ath9k_htc: USB layer deinitialized 23:07:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:26 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 357.434521][T11706] input: syz1 as /devices/virtual/input/input15 [ 357.454999][T11707] input: syz1 as /devices/virtual/input/input16 [ 357.461690][ T4345] usb 3-1: new high-speed USB device number 4 using dummy_hcd 23:07:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 357.621950][T11720] input: syz1 as /devices/virtual/input/input17 [ 357.625034][T11723] input: syz1 as /devices/virtual/input/input18 [ 357.679044][T11448] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 357.709370][ T4345] usb 3-1: Using ep0 maxpacket: 32 [ 357.829469][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.847507][ T4345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.859975][ T4345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.874440][ T4345] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 357.884703][ T4345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.904422][ T4345] usb 3-1: config 0 descriptor?? [ 358.151556][T11681] udc-core: couldn't find an available UDC or it's busy [ 358.158532][T11681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.184447][T11681] udc-core: couldn't find an available UDC or it's busy [ 358.199091][T11681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.259568][T11448] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 358.268658][T11448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.278454][T11448] usb 6-1: Product: syz [ 358.283641][T11448] usb 6-1: Manufacturer: syz [ 358.288259][T11448] usb 6-1: SerialNumber: syz [ 358.340554][T11448] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.471983][ T4345] uclogic 0003:28BD:0055.0002: unknown main item tag 0x0 [ 358.500431][ T4345] uclogic 0003:28BD:0055.0002: unknown main item tag 0x0 [ 358.540390][ T4345] uclogic 0003:28BD:0055.0002: unknown main item tag 0x0 [ 358.605407][ T4345] uclogic 0003:28BD:0055.0002: hidraw0: USB HID v0.00 Device [HID 28bd:0055] on usb-dummy_hcd.2-1/input0 [ 358.673415][ T4345] usb 3-1: USB disconnect, device number 4 [ 359.029121][T11448] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 359.456617][ T5] usb 6-1: USB disconnect, device number 4 [ 359.469213][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 359.719035][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 359.851765][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.862779][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.875433][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.888705][ T7] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 359.897998][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.909376][ T7] usb 3-1: config 0 descriptor?? 23:07:28 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) 23:07:28 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 360.049050][T11448] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 360.058802][T11448] ath9k_htc: Failed to initialize the device [ 360.074015][ T5] usb 6-1: ath9k_htc: USB layer deinitialized 23:07:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:28 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r8}}, 0x18}}, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_newroute={0x15c, 0x18, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x77, 0x5f, 0x5f, 0x1f, 0x9, "572e835bff42f03a626e7bbc0011f3dec305b5f6c8c923020cee02ace57e7ecf1a4d905c82924351d52da1af56307d661655c22043e9b1637fddc3311dee5b7ab8f9b85f8d5527e6f6e67adc43cba65f3ded52cf4484e9431bf36c08ca04c8bf6058df795ec67359b43d7f09930ae517124bdbe271023dd82d382d721cd621072c36c80777c1c675e0c769c1100633f1ed8050cdb2e14ed82df14d286ba24a73e7464348efae7e7f65be09250eb900135bc07a290a74b9ded4574961dcdaf375efe2eca1b896650dc19b61f1fe9dd45bd064811f1829ef88369e827eea438ef96aa83f6b1a477f0eb3ba2f648ec99d33348a3c862bfbfb19f17801d6439ef888", 0x3, "1f3fac516af681d8d45d8ef5d8a2017b9f6b95b5"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "6eb4e2e0b9be62b0"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x2, 0xac}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xd6c5d05e3b861fb8}, 0x800) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:28 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 360.239401][T11792] input: syz1 as /devices/virtual/input/input19 [ 360.246935][T11794] input: syz1 as /devices/virtual/input/input20 [ 360.270392][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 360.276473][ T7] usbhid: probe of 3-1:0.0 failed with error -71 23:07:29 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 360.318336][ T7] usb 3-1: USB disconnect, device number 5 23:07:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 360.427280][T11803] input: syz1 as /devices/virtual/input/input21 [ 360.509023][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 360.546095][T11824] input: syz1 as /devices/virtual/input/input22 23:07:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:29 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 360.572062][T11826] input: syz1 as /devices/virtual/input/input23 [ 360.683983][T11835] input: syz1 as /devices/virtual/input/input24 [ 361.029312][ T5] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.042978][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.079143][ T5] usb 6-1: Product: syz [ 361.090398][ T5] usb 6-1: Manufacturer: syz [ 361.111418][ T5] usb 6-1: SerialNumber: syz [ 361.170577][ T5] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.759093][ T5] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.186213][ T9337] usb 6-1: USB disconnect, device number 5 23:07:31 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 23:07:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:31 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:31 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x18}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 362.781893][T11874] input: syz1 as /devices/virtual/input/input26 [ 362.785294][T11873] input: syz1 as /devices/virtual/input/input25 23:07:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 362.849463][ T5] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 362.858750][ T5] ath9k_htc: Failed to initialize the device 23:07:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 362.893223][ T9337] usb 6-1: ath9k_htc: USB layer deinitialized 23:07:31 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 362.991363][T11898] input: syz1 as /devices/virtual/input/input28 23:07:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 363.123916][T11911] input: syz1 as /devices/virtual/input/input30 [ 363.244687][T11920] input: syz1 as /devices/virtual/input/input32 [ 363.269111][ T9337] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 363.809112][ T9337] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.818201][ T9337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.848977][ T9337] usb 6-1: Product: syz [ 363.853216][ T9337] usb 6-1: Manufacturer: syz [ 363.857825][ T9337] usb 6-1: SerialNumber: syz [ 363.900767][ T9337] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 364.549006][ T9337] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.754744][ T5] usb 6-1: USB disconnect, device number 6 23:07:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909, 0x0, 0x0, {0x7, 0x0, 0x0, r7}}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 365.342943][T11955] input: syz1 as /devices/virtual/input/input34 [ 365.344323][T11956] input: syz1 as /devices/virtual/input/input33 23:07:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:34 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 365.569137][ T9337] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 365.576143][ T9337] ath9k_htc: Failed to initialize the device [ 365.605166][ T5] usb 6-1: ath9k_htc: USB layer deinitialized 23:07:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 365.637696][T11982] input: syz1 as /devices/virtual/input/input38 23:07:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 365.974377][T12007] input: syz1 as /devices/virtual/input/input41 23:07:34 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:34 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 366.265908][T12027] input: syz1 as /devices/virtual/input/input43 [ 366.286929][T12029] input: syz1 as /devices/virtual/input/input44 [ 366.295497][T12031] input: syz1 as /devices/virtual/input/input45 23:07:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 366.508094][ T35] audit: type=1326 audit(1609974455.260:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12053 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 366.544837][T12055] input: syz1 as /devices/virtual/input/input46 23:07:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 366.578500][T12059] input: syz1 as /devices/virtual/input/input47 [ 366.594861][T12062] input: syz1 as /devices/virtual/input/input48 [ 366.728288][ T35] audit: type=1326 audit(1609974455.480:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12078 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:35 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:35 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 367.272917][T12095] input: syz1 as /devices/virtual/input/input49 [ 367.286443][T12097] input: syz1 as /devices/virtual/input/input51 [ 367.296074][T12096] input: syz1 as /devices/virtual/input/input50 [ 367.306219][ T35] audit: type=1326 audit(1609974456.060:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12103 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:36 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:36 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:36 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:36 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 367.570789][ T35] audit: type=1326 audit(1609974456.330:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12128 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 367.598477][T12130] input: syz1 as /devices/virtual/input/input52 [ 367.613533][T12129] input: syz1 as /devices/virtual/input/input53 23:07:36 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:36 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:36 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:36 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 368.297066][T12165] input: syz1 as /devices/virtual/input/input54 [ 368.304604][ T35] audit: type=1326 audit(1609974457.060:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12166 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 368.339729][T12163] input: syz1 as /devices/virtual/input/input55 23:07:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:37 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:37 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 368.517122][T12185] input: syz1 as /devices/virtual/input/input56 [ 368.523848][ T35] audit: type=1326 audit(1609974457.280:18): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12184 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 368.586237][T12189] input: syz1 as /devices/virtual/input/input57 23:07:37 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:37 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:37 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:37 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:37 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 369.260641][ T35] audit: type=1326 audit(1609974458.020:19): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12216 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:38 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:38 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:38 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 369.441766][T12237] input: syz1 as /devices/virtual/input/input58 23:07:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:38 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 369.607246][T12248] input: syz1 as /devices/virtual/input/input59 23:07:38 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:38 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:38 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:38 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 370.246737][ T35] audit: type=1326 audit(1609974459.000:20): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12268 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 370.277556][T12274] input: syz1 as /devices/virtual/input/input60 23:07:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 370.526596][T12293] input: syz1 as /devices/virtual/input/input61 23:07:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = socket(0x28, 0xa, 0x5) accept4$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 371.211981][ T35] audit: type=1326 audit(1609974459.970:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12315 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 371.245928][T12321] input: syz1 as /devices/virtual/input/input63 [ 371.249211][T12323] input: syz1 as /devices/virtual/input/input62 23:07:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 371.439657][T12344] input: syz1 as /devices/virtual/input/input64 [ 371.488306][T12351] input: syz1 as /devices/virtual/input/input66 [ 371.489810][T12347] input: syz1 as /devices/virtual/input/input65 23:07:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 371.684049][T12367] input: syz1 as /devices/virtual/input/input67 [ 371.702887][T12370] input: syz1 as /devices/virtual/input/input68 23:07:40 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket(0x28, 0xa, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:40 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 372.267884][T12389] input: syz1 as /devices/virtual/input/input69 [ 372.286450][T12395] input: syz1 as /devices/virtual/input/input70 [ 372.299382][T12392] input: syz1 as /devices/virtual/input/input71 [ 372.305803][ T35] audit: type=1326 audit(1609974461.060:22): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12385 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 372.541656][T12417] input: syz1 as /devices/virtual/input/input72 [ 372.581705][T12420] input: syz1 as /devices/virtual/input/input73 23:07:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 372.671625][T12432] input: syz1 as /devices/virtual/input/input74 [ 372.795427][T12443] input: syz1 as /devices/virtual/input/input75 [ 372.844317][T12445] input: syz1 as /devices/virtual/input/input76 23:07:41 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:41 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 373.260843][T12465] input: syz1 as /devices/virtual/input/input77 [ 373.265363][T12467] input: syz1 as /devices/virtual/input/input79 [ 373.268744][T12466] input: syz1 as /devices/virtual/input/input78 [ 373.290227][ T35] audit: type=1326 audit(1609974462.050:23): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12464 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 373.527493][T12494] input: syz1 as /devices/virtual/input/input81 [ 373.533479][T12493] input: syz1 as /devices/virtual/input/input80 [ 373.562486][T12501] input: syz1 as /devices/virtual/input/input82 23:07:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 373.739387][T12519] input: syz1 as /devices/virtual/input/input83 [ 373.777373][T12522] input: syz1 as /devices/virtual/input/input84 23:07:42 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:42 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 374.242219][T12546] input: syz1 as /devices/virtual/input/input85 [ 374.267739][ T35] audit: type=1326 audit(1609974463.020:24): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12541 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 374.286482][T12555] input: syz1 as /devices/virtual/input/input86 [ 374.299474][T12551] input: syz1 as /devices/virtual/input/input87 23:07:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 374.463073][T12575] input: syz1 as /devices/virtual/input/input88 23:07:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 374.539001][T12582] input: syz1 as /devices/virtual/input/input89 [ 374.567157][T12584] input: syz1 as /devices/virtual/input/input90 23:07:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 374.651911][T12597] input: syz1 as /devices/virtual/input/input91 [ 374.742719][T12605] input: syz1 as /devices/virtual/input/input92 23:07:43 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:43 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 375.234828][T12623] input: syz1 as /devices/virtual/input/input93 [ 375.243783][T12624] ptrace attach of "/root/syz-executor.5"[12622] was attempted by "/root/syz-executor.5"[12624] [ 375.249847][T12625] input: syz1 as /devices/virtual/input/input94 [ 375.261524][ T35] audit: type=1326 audit(1609974464.020:25): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12618 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 375.321508][T12628] input: syz1 as /devices/virtual/input/input95 23:07:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 375.530489][T12651] input: syz1 as /devices/virtual/input/input96 [ 375.564181][T12659] input: syz1 as /devices/virtual/input/input97 23:07:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 375.621706][T12665] input: syz1 as /devices/virtual/input/input98 23:07:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:44 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:44 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 376.220642][T12691] input: syz1 as /devices/virtual/input/input100 [ 376.235327][T12697] ptrace attach of "/root/syz-executor.5"[12693] was attempted by "/root/syz-executor.5"[12697] [ 376.250498][T12696] input: syz1 as /devices/virtual/input/input102 23:07:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 376.262885][ T35] audit: type=1326 audit(1609974465.020:26): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12690 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 376.423814][T12714] input: syz1 as /devices/virtual/input/input103 23:07:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 376.523596][T12722] input: syz1 as /devices/virtual/input/input105 23:07:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:45 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 377.267785][T12763] ptrace attach of "/root/syz-executor.5"[12760] was attempted by "/root/syz-executor.5"[12763] [ 377.290960][ T35] audit: type=1326 audit(1609974466.050:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12754 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:46 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:46 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:46 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 378.286079][ T35] audit: type=1326 audit(1609974467.040:28): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12806 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:47 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 378.453280][ T35] audit: type=1326 audit(1609974467.210:29): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12816 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 378.629053][ T35] audit: type=1326 audit(1609974467.380:30): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12828 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:47 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:47 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:47 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 379.269883][T12848] ptrace attach of "/root/syz-executor.5"[12845] was attempted by "/root/syz-executor.5"[12848] [ 379.283847][T12846] input: syz1 as /devices/virtual/input/input125 [ 379.293866][ T35] audit: type=1326 audit(1609974468.050:31): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12842 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 379.322945][T12850] input: syz1 as /devices/virtual/input/input126 23:07:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:48 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 379.569997][T12871] input: syz1 as /devices/virtual/input/input128 [ 379.594522][T12874] input: syz1 as /devices/virtual/input/input130 23:07:48 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:07:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:48 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 379.797964][T12894] input: syz1 as /devices/virtual/input/input131 23:07:48 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:48 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:49 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:49 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:49 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 380.176138][T12914] ptrace attach of "/root/syz-executor.5"[12913] was attempted by "/root/syz-executor.5"[12914] [ 380.200760][ T35] audit: type=1326 audit(1609974468.950:32): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12909 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 380.291404][T12920] input: syz1 as /devices/virtual/input/input133 23:07:49 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:49 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 380.517438][T12939] input: syz1 as /devices/virtual/input/input134 23:07:49 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:49 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x80000000007], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 380.731569][T12956] FAULT_INJECTION: forcing a failure. [ 380.731569][T12956] name failslab, interval 1, probability 0, space 0, times 1 [ 380.754878][T12960] input: syz1 as /devices/virtual/input/input136 [ 380.779302][T12956] CPU: 0 PID: 12956 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 380.788112][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.798176][T12956] Call Trace: [ 380.801468][T12956] dump_stack+0x107/0x163 [ 380.805882][T12956] should_fail.cold+0x5/0xa [ 380.810398][T12956] ? tomoyo_realpath_from_path+0xc3/0x620 [ 380.816219][T12956] ? tomoyo_realpath_from_path+0xc3/0x620 [ 380.821972][T12956] should_failslab+0x5/0x10 [ 380.826541][T12956] __kmalloc+0x72/0x3e0 [ 380.830739][T12956] tomoyo_realpath_from_path+0xc3/0x620 [ 380.836307][T12956] ? tomoyo_profile+0x42/0x50 [ 380.840999][T12956] tomoyo_path_number_perm+0x1d5/0x590 [ 380.846486][T12956] ? tomoyo_path_number_perm+0x18d/0x590 [ 380.852154][T12956] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 380.858017][T12956] ? lock_downgrade+0x6d0/0x6d0 [ 380.862958][T12956] ? __mutex_unlock_slowpath+0xe2/0x610 [ 380.868571][T12956] ? __fget_files+0x288/0x3d0 [ 380.873283][T12956] security_file_ioctl+0x50/0xb0 [ 380.878281][T12956] __x64_sys_ioctl+0xb3/0x200 [ 380.883006][T12956] do_syscall_64+0x2d/0x70 [ 380.887447][T12956] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 380.893357][T12956] RIP: 0033:0x45e219 [ 380.897258][T12956] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.916890][T12956] RSP: 002b:00007fa3be3bcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.925327][T12956] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 380.933302][T12956] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 380.941277][T12956] RBP: 00007fa3be3bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 380.949272][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.957268][T12956] R13: 00000000016afb5f R14: 00007fa3be3bd9c0 R15: 000000000119bf8c 23:07:49 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:49 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 381.035712][T12956] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.047545][T12956] input: syz1 as /devices/virtual/input/input135 [ 381.127605][T12973] FAULT_INJECTION: forcing a failure. [ 381.127605][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 381.150543][T12976] ptrace attach of "/root/syz-executor.5"[12975] was attempted by "/root/syz-executor.5"[12976] [ 381.166392][ T35] audit: type=1326 audit(1609974469.920:33): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12974 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 381.215537][T12973] CPU: 1 PID: 12973 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 381.224365][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.234437][T12973] Call Trace: [ 381.237727][T12973] dump_stack+0x107/0x163 [ 381.242118][T12973] should_fail.cold+0x5/0xa [ 381.246660][T12973] ? tomoyo_realpath_from_path+0xc3/0x620 [ 381.252409][T12973] ? tomoyo_realpath_from_path+0xc3/0x620 [ 381.258145][T12973] should_failslab+0x5/0x10 [ 381.262663][T12973] __kmalloc+0x72/0x3e0 [ 381.266835][T12973] tomoyo_realpath_from_path+0xc3/0x620 [ 381.272399][T12973] ? tomoyo_profile+0x42/0x50 [ 381.277095][T12973] tomoyo_path_number_perm+0x1d5/0x590 [ 381.282588][T12973] ? tomoyo_path_number_perm+0x18d/0x590 [ 381.288246][T12973] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 381.294151][T12973] ? lock_downgrade+0x6d0/0x6d0 [ 381.299016][T12973] ? __mutex_unlock_slowpath+0xe2/0x610 [ 381.304618][T12973] ? __fget_files+0x288/0x3d0 [ 381.309313][T12973] security_file_ioctl+0x50/0xb0 [ 381.314268][T12973] __x64_sys_ioctl+0xb3/0x200 [ 381.318975][T12973] do_syscall_64+0x2d/0x70 [ 381.323402][T12973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 381.329309][T12973] RIP: 0033:0x45e219 [ 381.333208][T12973] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.352827][T12973] RSP: 002b:00007f851ceb9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.361250][T12973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 381.369223][T12973] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 381.377194][T12973] RBP: 00007f851ceb9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 381.385167][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.393140][T12973] R13: 00000000016afb5f R14: 00007f851ceba9c0 R15: 000000000119bf8c 23:07:50 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:50 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 381.437630][T12973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.455010][T12973] input: syz1 as /devices/virtual/input/input137 23:07:50 executing program 2 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 381.520877][T12987] input: syz1 as /devices/virtual/input/input138 [ 381.522984][T12986] FAULT_INJECTION: forcing a failure. [ 381.522984][T12986] name failslab, interval 1, probability 0, space 0, times 0 23:07:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 381.606563][T12986] CPU: 0 PID: 12986 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 381.615382][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.625454][T12986] Call Trace: [ 381.628745][T12986] dump_stack+0x107/0x163 [ 381.633114][T12986] should_fail.cold+0x5/0xa [ 381.637664][T12986] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 381.643068][T12986] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 381.648473][T12986] should_failslab+0x5/0x10 [ 381.653003][T12986] __kmalloc+0x72/0x3e0 [ 381.657186][T12986] tomoyo_encode2.part.0+0xe9/0x3a0 [ 381.662416][T12986] tomoyo_encode+0x28/0x50 [ 381.666858][T12986] tomoyo_realpath_from_path+0x186/0x620 [ 381.672549][T12986] tomoyo_path_number_perm+0x1d5/0x590 [ 381.678029][T12986] ? tomoyo_path_number_perm+0x18d/0x590 [ 381.683697][T12986] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 381.689568][T12986] ? lock_downgrade+0x6d0/0x6d0 [ 381.694445][T12986] ? __mutex_unlock_slowpath+0xe2/0x610 [ 381.700030][T12986] ? __fget_files+0x288/0x3d0 [ 381.704744][T12986] security_file_ioctl+0x50/0xb0 [ 381.709708][T12986] __x64_sys_ioctl+0xb3/0x200 [ 381.714411][T12986] do_syscall_64+0x2d/0x70 [ 381.718847][T12986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 381.724762][T12986] RIP: 0033:0x45e219 [ 381.728673][T12986] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.748297][T12986] RSP: 002b:00007fa3be3bcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:50 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 381.756733][T12986] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 381.764717][T12986] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 381.772704][T12986] RBP: 00007fa3be3bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 381.780692][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.788683][T12986] R13: 00000000016afb5f R14: 00007fa3be3bd9c0 R15: 000000000119bf8c 23:07:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 381.885033][T13003] FAULT_INJECTION: forcing a failure. [ 381.885033][T13003] name failslab, interval 1, probability 0, space 0, times 0 [ 381.957428][T13003] CPU: 0 PID: 13003 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 381.966276][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.976348][T13003] Call Trace: [ 381.979673][T13003] dump_stack+0x107/0x163 [ 381.984047][T13003] should_fail.cold+0x5/0xa [ 381.988587][T13003] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 381.994000][T13003] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 381.999425][T13003] should_failslab+0x5/0x10 [ 382.003959][T13003] __kmalloc+0x72/0x3e0 [ 382.008142][T13003] tomoyo_encode2.part.0+0xe9/0x3a0 [ 382.013375][T13003] tomoyo_encode+0x28/0x50 [ 382.017812][T13003] tomoyo_realpath_from_path+0x186/0x620 [ 382.023493][T13003] tomoyo_path_number_perm+0x1d5/0x590 [ 382.028968][T13003] ? tomoyo_path_number_perm+0x18d/0x590 [ 382.034621][T13003] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 382.040505][T13003] ? lock_downgrade+0x6d0/0x6d0 [ 382.045373][T13003] ? __mutex_unlock_slowpath+0xe2/0x610 [ 382.050947][T13003] ? __fget_files+0x288/0x3d0 [ 382.055642][T13003] security_file_ioctl+0x50/0xb0 [ 382.060604][T13003] __x64_sys_ioctl+0xb3/0x200 [ 382.065318][T13003] do_syscall_64+0x2d/0x70 [ 382.069748][T13003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 382.075657][T13003] RIP: 0033:0x45e219 [ 382.079571][T13003] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.099221][T13003] RSP: 002b:00007f851ceb9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:50 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 382.107647][T13003] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 382.115621][T13003] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 382.123621][T13003] RBP: 00007f851ceb9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 382.131624][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.139605][T13003] R13: 00000000016afb5f R14: 00007f851ceba9c0 R15: 000000000119bf8c [ 382.209252][T12986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.220020][T12986] input: syz1 as /devices/virtual/input/input139 [ 382.224894][T13010] input: syz1 as /devices/virtual/input/input141 23:07:51 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 382.355543][T13024] FAULT_INJECTION: forcing a failure. [ 382.355543][T13024] name failslab, interval 1, probability 0, space 0, times 0 [ 382.370178][ T35] audit: type=1326 audit(1609974471.130:34): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13017 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 382.409793][T13024] CPU: 0 PID: 13024 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 382.418599][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.428705][T13024] Call Trace: [ 382.431994][T13024] dump_stack+0x107/0x163 [ 382.436362][T13024] should_fail.cold+0x5/0xa [ 382.440897][T13024] ? input_mt_init_slots+0xd9/0x5f0 [ 382.446194][T13024] ? input_mt_init_slots+0xd9/0x5f0 [ 382.451424][T13024] should_failslab+0x5/0x10 [ 382.455959][T13024] __kmalloc+0x72/0x3e0 [ 382.460152][T13024] input_mt_init_slots+0xd9/0x5f0 [ 382.465219][T13024] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 382.471246][T13024] ? uinput_write+0x1170/0x1170 [ 382.476139][T13024] ? generic_block_fiemap+0x60/0x60 [ 382.481367][T13024] ? lock_downgrade+0x6d0/0x6d0 [ 382.486272][T13024] ? __mutex_unlock_slowpath+0xe2/0x610 [ 382.491867][T13024] ? __fget_files+0x288/0x3d0 [ 382.496585][T13024] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 382.502977][T13024] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 382.509176][T13024] __x64_sys_ioctl+0x193/0x200 [ 382.514105][T13024] do_syscall_64+0x2d/0x70 [ 382.518555][T13024] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 382.524487][T13024] RIP: 0033:0x45e219 [ 382.528430][T13024] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.548062][T13024] RSP: 002b:00007fa3be3bcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:51 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) [ 382.556495][T13024] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 382.564481][T13024] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 382.572466][T13024] RBP: 00007fa3be3bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 382.580452][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.588435][T13024] R13: 00000000016afb5f R14: 00007fa3be3bd9c0 R15: 000000000119bf8c [ 382.637293][T13003] ERROR: Out of memory at tomoyo_realpath_from_path. 23:07:51 executing program 1 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 382.684383][T13003] input: syz1 as /devices/virtual/input/input140 23:07:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:07:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 382.842114][T13047] FAULT_INJECTION: forcing a failure. [ 382.842114][T13047] name failslab, interval 1, probability 0, space 0, times 0 [ 382.887581][T13050] input: syz1 as /devices/virtual/input/input146 [ 382.895513][T13047] CPU: 0 PID: 13047 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 382.904326][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.914390][T13047] Call Trace: [ 382.917700][T13047] dump_stack+0x107/0x163 [ 382.922071][T13047] should_fail.cold+0x5/0xa [ 382.926591][T13047] ? input_register_device+0x609/0xce0 [ 382.932085][T13047] ? input_register_device+0x609/0xce0 [ 382.937557][T13047] should_failslab+0x5/0x10 [ 382.942075][T13047] __kmalloc+0x72/0x3e0 [ 382.946254][T13047] input_register_device+0x609/0xce0 [ 382.951566][T13047] uinput_ioctl_handler.isra.0+0xa9e/0x1dc0 [ 382.957482][T13047] ? uinput_write+0x1170/0x1170 [ 382.962367][T13047] ? generic_block_fiemap+0x60/0x60 [ 382.967575][T13047] ? lock_downgrade+0x6d0/0x6d0 [ 382.972459][T13047] ? __mutex_unlock_slowpath+0xe2/0x610 [ 382.978052][T13047] ? __fget_files+0x288/0x3d0 [ 382.982766][T13047] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 382.989077][T13047] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 382.995259][T13047] __x64_sys_ioctl+0x193/0x200 [ 383.000041][T13047] do_syscall_64+0x2d/0x70 [ 383.004468][T13047] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 383.010382][T13047] RIP: 0033:0x45e219 [ 383.014282][T13047] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:07:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 383.033898][T13047] RSP: 002b:00007fa3be3bcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.042320][T13047] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 383.050310][T13047] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 383.058322][T13047] RBP: 00007fa3be3bcca0 R08: 0000000000000000 R09: 0000000000000000 [ 383.066292][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 383.074265][T13047] R13: 00000000016afb5f R14: 00007fa3be3bd9c0 R15: 000000000119bf8c 23:07:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2) 23:07:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:52 executing program 0 (fault-call:7 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x10) [ 383.427594][ T35] audit: type=1326 audit(1609974472.180:35): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13062 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 383.475970][T13073] FAULT_INJECTION: forcing a failure. [ 383.475970][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 383.544493][T13073] CPU: 1 PID: 13073 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 383.553306][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.563381][T13073] Call Trace: [ 383.566674][T13073] dump_stack+0x107/0x163 [ 383.571045][T13073] should_fail.cold+0x5/0xa [ 383.575574][T13073] ? tomoyo_realpath_from_path+0xc3/0x620 [ 383.581329][T13073] ? tomoyo_realpath_from_path+0xc3/0x620 [ 383.587076][T13073] should_failslab+0x5/0x10 [ 383.591607][T13073] __kmalloc+0x72/0x3e0 [ 383.595806][T13073] tomoyo_realpath_from_path+0xc3/0x620 [ 383.601386][T13073] ? tomoyo_profile+0x42/0x50 [ 383.606095][T13073] tomoyo_path_number_perm+0x1d5/0x590 [ 383.611583][T13073] ? tomoyo_path_number_perm+0x18d/0x590 [ 383.617248][T13073] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 383.623157][T13073] ? lock_downgrade+0x6d0/0x6d0 [ 383.628036][T13073] ? __mutex_unlock_slowpath+0xe2/0x610 [ 383.633650][T13073] ? __fget_files+0x288/0x3d0 [ 383.638360][T13073] security_file_ioctl+0x50/0xb0 [ 383.643330][T13073] __x64_sys_ioctl+0xb3/0x200 [ 383.648067][T13073] do_syscall_64+0x2d/0x70 [ 383.652515][T13073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 383.658443][T13073] RIP: 0033:0x45e219 [ 383.662353][T13073] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.682096][T13073] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:52 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) [ 383.690526][T13073] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 383.698508][T13073] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 383.706492][T13073] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 383.714475][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.722458][T13073] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c 23:07:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x7ab) 23:07:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 383.863647][T13073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.886541][T13073] input: syz1 as /devices/virtual/input/input150 23:07:52 executing program 0 (fault-call:7 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 384.019088][T13102] input: syz1 as /devices/virtual/input/input155 [ 384.092937][T13108] FAULT_INJECTION: forcing a failure. [ 384.092937][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 384.137477][T13108] CPU: 0 PID: 13108 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 384.146332][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.156423][T13108] Call Trace: [ 384.159737][T13108] dump_stack+0x107/0x163 [ 384.164071][T13108] should_fail.cold+0x5/0xa [ 384.168580][T13108] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 384.173985][T13108] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 384.179385][T13108] should_failslab+0x5/0x10 [ 384.183911][T13108] __kmalloc+0x72/0x3e0 [ 384.188093][T13108] tomoyo_encode2.part.0+0xe9/0x3a0 [ 384.193334][T13108] tomoyo_encode+0x28/0x50 [ 384.197771][T13108] tomoyo_realpath_from_path+0x186/0x620 [ 384.203428][T13108] tomoyo_path_number_perm+0x1d5/0x590 [ 384.208883][T13108] ? tomoyo_path_number_perm+0x18d/0x590 [ 384.214540][T13108] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 384.220386][T13108] ? lock_downgrade+0x6d0/0x6d0 [ 384.225269][T13108] ? __mutex_unlock_slowpath+0xe2/0x610 [ 384.230865][T13108] ? __fget_files+0x288/0x3d0 [ 384.235598][T13108] security_file_ioctl+0x50/0xb0 [ 384.240572][T13108] __x64_sys_ioctl+0xb3/0x200 [ 384.245305][T13108] do_syscall_64+0x2d/0x70 [ 384.249752][T13108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 384.255683][T13108] RIP: 0033:0x45e219 [ 384.259624][T13108] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.279259][T13108] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:53 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4c01) 23:07:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2) [ 384.287700][T13108] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 384.295686][T13108] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 384.303671][T13108] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 384.311659][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.319645][T13108] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c [ 384.349147][T13108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.357893][T13108] input: syz1 as /devices/virtual/input/input156 23:07:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x6) 23:07:53 executing program 0 (fault-call:7 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:53 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 384.509560][ T35] audit: type=1326 audit(1609974473.270:36): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13125 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 384.612416][T13139] FAULT_INJECTION: forcing a failure. [ 384.612416][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 384.634431][T13139] CPU: 0 PID: 13139 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 384.643259][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.653356][T13139] Call Trace: [ 384.656650][T13139] dump_stack+0x107/0x163 [ 384.661054][T13139] should_fail.cold+0x5/0xa [ 384.665591][T13139] ? input_mt_init_slots+0xd9/0x5f0 [ 384.670824][T13139] ? input_mt_init_slots+0xd9/0x5f0 [ 384.676077][T13139] should_failslab+0x5/0x10 [ 384.680608][T13139] __kmalloc+0x72/0x3e0 [ 384.684797][T13139] input_mt_init_slots+0xd9/0x5f0 [ 384.689854][T13139] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 384.695789][T13139] ? uinput_write+0x1170/0x1170 [ 384.700677][T13139] ? generic_block_fiemap+0x60/0x60 [ 384.705928][T13139] ? lock_downgrade+0x6d0/0x6d0 [ 384.710820][T13139] ? __mutex_unlock_slowpath+0xe2/0x610 [ 384.716419][T13139] ? __fget_files+0x288/0x3d0 [ 384.721127][T13139] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 384.727404][T13139] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 384.734208][T13139] __x64_sys_ioctl+0x193/0x200 [ 384.739009][T13139] do_syscall_64+0x2d/0x70 [ 384.743463][T13139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 384.749383][T13139] RIP: 0033:0x45e219 [ 384.753303][T13139] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.772939][T13139] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.781375][T13139] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 384.789360][T13139] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 384.797343][T13139] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 384.805323][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.813307][T13139] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c 23:07:53 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 23:07:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x541b) 23:07:53 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:07:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x10) 23:07:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5421) 23:07:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x7ab) 23:07:54 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:54 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23:07:54 executing program 0 (fault-call:7 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5450) 23:07:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2400) [ 385.370555][T13173] FAULT_INJECTION: forcing a failure. [ 385.370555][T13173] name failslab, interval 1, probability 0, space 0, times 0 [ 385.392344][ T35] audit: type=1326 audit(1609974474.150:37): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13172 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 385.406219][T13173] CPU: 1 PID: 13173 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 385.421293][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.431352][T13173] Call Trace: [ 385.434631][T13173] dump_stack+0x107/0x163 [ 385.438980][T13173] should_fail.cold+0x5/0xa [ 385.443492][T13173] ? input_register_device+0x609/0xce0 [ 385.448968][T13173] ? input_register_device+0x609/0xce0 [ 385.454431][T13173] should_failslab+0x5/0x10 [ 385.458942][T13173] __kmalloc+0x72/0x3e0 [ 385.463111][T13173] input_register_device+0x609/0xce0 [ 385.468408][T13173] uinput_ioctl_handler.isra.0+0xa9e/0x1dc0 [ 385.474319][T13173] ? uinput_write+0x1170/0x1170 [ 385.479184][T13173] ? generic_block_fiemap+0x60/0x60 [ 385.484391][T13173] ? lock_downgrade+0x6d0/0x6d0 [ 385.489252][T13173] ? __mutex_unlock_slowpath+0xe2/0x610 [ 385.495270][T13173] ? __fget_files+0x288/0x3d0 [ 385.499961][T13173] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 385.506215][T13173] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 385.512386][T13173] __x64_sys_ioctl+0x193/0x200 [ 385.517161][T13173] do_syscall_64+0x2d/0x70 [ 385.521584][T13173] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 385.527505][T13173] RIP: 0033:0x45e219 [ 385.531410][T13173] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.551038][T13173] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.559480][T13173] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 385.567456][T13173] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 385.575428][T13173] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 385.583400][T13173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 385.591371][T13173] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c 23:07:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4c01) 23:07:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 23:07:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) 23:07:54 executing program 4 (fault-call:11 fault-nth:0): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:54 executing program 0 (fault-call:7 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x541b) 23:07:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) [ 385.991989][T13192] FAULT_INJECTION: forcing a failure. [ 385.991989][T13192] name failslab, interval 1, probability 0, space 0, times 0 [ 386.026831][T13200] FAULT_INJECTION: forcing a failure. [ 386.026831][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 386.071325][T13192] CPU: 0 PID: 13192 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 386.080126][T13192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.090197][T13192] Call Trace: [ 386.093494][T13192] dump_stack+0x107/0x163 [ 386.097854][T13192] should_fail.cold+0x5/0xa [ 386.102385][T13192] ? tomoyo_realpath_from_path+0xc3/0x620 [ 386.108140][T13192] ? tomoyo_realpath_from_path+0xc3/0x620 [ 386.113887][T13192] should_failslab+0x5/0x10 [ 386.118411][T13192] __kmalloc+0x72/0x3e0 [ 386.122596][T13192] tomoyo_realpath_from_path+0xc3/0x620 [ 386.128259][T13192] ? tomoyo_profile+0x42/0x50 [ 386.132962][T13192] tomoyo_path_number_perm+0x1d5/0x590 [ 386.138461][T13192] ? tomoyo_path_number_perm+0x18d/0x590 [ 386.144123][T13192] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 386.149986][T13192] ? lock_downgrade+0x6d0/0x6d0 [ 386.154867][T13192] ? __mutex_unlock_slowpath+0xe2/0x610 [ 386.160447][T13192] ? __fget_files+0x288/0x3d0 [ 386.165151][T13192] security_file_ioctl+0x50/0xb0 [ 386.170117][T13192] __x64_sys_ioctl+0xb3/0x200 [ 386.174824][T13192] do_syscall_64+0x2d/0x70 [ 386.179257][T13192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.185173][T13192] RIP: 0033:0x45e219 [ 386.189078][T13192] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.208709][T13192] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.217142][T13192] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 [ 386.225123][T13192] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 386.233126][T13192] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 386.241105][T13192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.249087][T13192] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c [ 386.257094][T13200] CPU: 1 PID: 13200 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 386.265876][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.275941][T13200] Call Trace: [ 386.279231][T13200] dump_stack+0x107/0x163 [ 386.283598][T13200] should_fail.cold+0x5/0xa [ 386.288127][T13200] ? device_add+0x10ac/0x1d90 [ 386.292917][T13200] ? device_add+0x10ac/0x1d90 [ 386.297621][T13200] should_failslab+0x5/0x10 [ 386.302146][T13200] kmem_cache_alloc_trace+0x55/0x360 [ 386.307460][T13200] device_add+0x10ac/0x1d90 [ 386.311994][T13200] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 386.318265][T13200] ? unpoison_range+0x3a/0x60 [ 386.322975][T13200] input_register_device+0x73a/0xce0 [ 386.328290][T13200] uinput_ioctl_handler.isra.0+0xa9e/0x1dc0 [ 386.334215][T13200] ? uinput_write+0x1170/0x1170 [ 386.339118][T13200] ? generic_block_fiemap+0x60/0x60 [ 386.344336][T13200] ? lock_downgrade+0x6d0/0x6d0 [ 386.349212][T13200] ? __mutex_unlock_slowpath+0xe2/0x610 [ 386.354828][T13200] ? __fget_files+0x288/0x3d0 [ 386.359528][T13200] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 386.365796][T13200] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 386.371987][T13200] __x64_sys_ioctl+0x193/0x200 [ 386.376778][T13200] do_syscall_64+0x2d/0x70 [ 386.381213][T13200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 386.387131][T13200] RIP: 0033:0x45e219 [ 386.391040][T13200] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.410690][T13200] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:07:55 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5421) 23:07:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 386.419126][T13200] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 386.427114][T13200] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 386.435099][T13200] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 386.443086][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 386.451071][T13200] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c [ 386.535361][ T35] audit: type=1326 audit(1609974475.290:38): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13209 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) 23:07:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5450) 23:07:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 386.631737][T13192] ERROR: Out of memory at tomoyo_realpath_from_path. 23:07:55 executing program 0 (fault-call:7 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x54a1) 23:07:55 executing program 4 (fault-call:11 fault-nth:1): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 386.832502][T13227] FAULT_INJECTION: forcing a failure. [ 386.832502][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 386.862519][T13227] CPU: 1 PID: 13227 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 386.871337][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.881408][T13227] Call Trace: [ 386.884704][T13227] dump_stack+0x107/0x163 [ 386.889070][T13227] should_fail.cold+0x5/0xa [ 386.893605][T13227] ? kstrdup_const+0x53/0x80 [ 386.898288][T13227] ? kstrdup_const+0x53/0x80 [ 386.902904][T13227] should_failslab+0x5/0x10 [ 386.907433][T13227] __kmalloc_track_caller+0x70/0x3b0 [ 386.912758][T13227] kstrdup+0x36/0x70 [ 386.916678][T13227] kstrdup_const+0x53/0x80 [ 386.921125][T13227] __kernfs_new_node+0x9d/0x8b0 [ 386.926079][T13227] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 386.931582][T13227] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 386.937639][T13227] kernfs_create_dir_ns+0x9c/0x220 [ 386.942795][T13227] sysfs_create_dir_ns+0x127/0x290 [ 386.947932][T13227] ? sysfs_create_mount_point+0xb0/0xb0 [ 386.953507][T13227] ? rwlock_bug.part.0+0x90/0x90 [ 386.958514][T13227] ? class_dir_child_ns_type+0x9/0x60 [ 386.963925][T13227] kobject_add_internal+0x2d2/0xa60 [ 386.969219][T13227] kobject_add+0x150/0x1c0 [ 386.973747][T13227] ? kset_create_and_add+0x190/0x190 [ 386.979102][T13227] device_add+0x36a/0x1d90 [ 386.983557][T13227] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 386.989831][T13227] ? unpoison_range+0x3a/0x60 [ 386.994552][T13227] input_register_device+0x73a/0xce0 [ 386.999867][T13227] uinput_ioctl_handler.isra.0+0xa9e/0x1dc0 [ 387.005794][T13227] ? uinput_write+0x1170/0x1170 [ 387.010674][T13227] ? generic_block_fiemap+0x60/0x60 [ 387.015889][T13227] ? lock_downgrade+0x6d0/0x6d0 [ 387.020763][T13227] ? __mutex_unlock_slowpath+0xe2/0x610 [ 387.026378][T13227] ? __fget_files+0x288/0x3d0 [ 387.031085][T13227] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 387.037351][T13227] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 387.043538][T13227] __x64_sys_ioctl+0x193/0x200 [ 387.048325][T13227] do_syscall_64+0x2d/0x70 [ 387.052762][T13227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.058679][T13227] RIP: 0033:0x45e219 [ 387.062588][T13227] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:07:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) 23:07:55 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 387.082212][T13227] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.090647][T13227] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219 [ 387.098631][T13227] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 387.106639][T13227] RBP: 00007f1ca424dca0 R08: 0000000000000000 R09: 0000000000000000 [ 387.114626][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 387.122618][T13227] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c 23:07:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 387.294729][T13238] FAULT_INJECTION: forcing a failure. [ 387.294729][T13238] name failslab, interval 1, probability 0, space 0, times 0 [ 387.321320][T13238] CPU: 1 PID: 13238 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 387.330148][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.340246][T13238] Call Trace: [ 387.343547][T13238] dump_stack+0x107/0x163 [ 387.347926][T13238] should_fail.cold+0x5/0xa [ 387.352450][T13238] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 387.357870][T13238] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 387.363271][T13238] should_failslab+0x5/0x10 [ 387.367801][T13238] __kmalloc+0x72/0x3e0 [ 387.371994][T13238] tomoyo_encode2.part.0+0xe9/0x3a0 [ 387.377223][T13238] ? unpoison_range+0x3a/0x60 [ 387.381939][T13238] tomoyo_encode+0x28/0x50 [ 387.386392][T13238] tomoyo_realpath_from_path+0x186/0x620 [ 387.392067][T13238] ? tomoyo_profile+0x42/0x50 [ 387.396779][T13238] tomoyo_path_number_perm+0x1d5/0x590 [ 387.402271][T13238] ? tomoyo_path_number_perm+0x18d/0x590 [ 387.407937][T13238] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 387.413850][T13238] ? lock_downgrade+0x6d0/0x6d0 [ 387.418730][T13238] ? __mutex_unlock_slowpath+0xe2/0x610 [ 387.424325][T13238] ? __fget_files+0x288/0x3d0 [ 387.429039][T13238] security_file_ioctl+0x50/0xb0 [ 387.434007][T13238] __x64_sys_ioctl+0xb3/0x200 [ 387.438724][T13238] do_syscall_64+0x2d/0x70 [ 387.443167][T13238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.449088][T13238] RIP: 0033:0x45e219 [ 387.453002][T13238] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.472633][T13238] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.481067][T13238] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 23:07:56 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) 23:07:56 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 387.489072][T13238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 387.497059][T13238] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 387.505043][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.513029][T13238] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c [ 387.619212][ T35] audit: type=1326 audit(1609974476.380:39): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13251 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:07:56 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 23:07:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) [ 387.661562][T13227] kobject_add_internal failed for input192 (error: -12 parent: input) 23:07:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) 23:07:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:07:56 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 387.818199][T13238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.862770][T13266] input: syz1 as /devices/virtual/input/input204 23:07:56 executing program 4 (fault-call:11 fault-nth:2): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5505) 23:07:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) 23:07:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x2) [ 388.138300][T13284] FAULT_INJECTION: forcing a failure. [ 388.138300][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 388.175654][T13284] CPU: 1 PID: 13284 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 388.184454][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.194524][T13284] Call Trace: [ 388.197818][T13284] dump_stack+0x107/0x163 [ 388.202188][T13284] should_fail.cold+0x5/0xa [ 388.206723][T13284] ? kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 388.212635][T13284] should_failslab+0x5/0x10 [ 388.217166][T13284] kmem_cache_alloc+0x5b/0x440 [ 388.221969][T13284] kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 388.227647][T13284] mmu_topup_memory_caches+0x1f/0xd0 [ 388.233048][T13284] kvm_mmu_load+0x7d/0xff0 [ 388.237488][T13284] ? inject_pending_event+0x5c5/0x1240 [ 388.243073][T13284] vcpu_enter_guest+0x2c69/0x4160 [ 388.248138][T13284] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 388.254411][T13284] ? lock_release+0x710/0x710 [ 388.259119][T13284] ? mark_held_locks+0x9f/0xe0 [ 388.263934][T13284] ? kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 388.269687][T13284] kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 388.275271][T13284] kvm_vcpu_ioctl+0x467/0xd90 [ 388.280049][T13284] ? kvm_io_bus_write+0x280/0x280 [ 388.285113][T13284] ? generic_block_fiemap+0x60/0x60 [ 388.290339][T13284] ? lock_downgrade+0x6d0/0x6d0 [ 388.295228][T13284] ? __mutex_unlock_slowpath+0xe2/0x610 [ 388.300820][T13284] ? __fget_files+0x288/0x3d0 [ 388.305524][T13284] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 388.311788][T13284] ? kvm_io_bus_write+0x280/0x280 [ 388.316840][T13284] __x64_sys_ioctl+0x193/0x200 [ 388.321632][T13284] do_syscall_64+0x2d/0x70 [ 388.326070][T13284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 388.331986][T13284] RIP: 0033:0x45e219 [ 388.335897][T13284] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.355520][T13284] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.363954][T13284] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 [ 388.371938][T13284] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 388.379955][T13284] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 388.387938][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.395921][T13284] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c 23:07:57 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:07:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) 23:07:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) 23:07:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x10) 23:07:57 executing program 4 (fault-call:11 fault-nth:3): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:07:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4c01) 23:07:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5505) [ 388.688083][ T35] audit: type=1326 audit(1609974477.440:40): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13301 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 388.742112][T13308] FAULT_INJECTION: forcing a failure. [ 388.742112][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 388.757646][T13308] CPU: 0 PID: 13308 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 388.766431][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.776502][T13308] Call Trace: [ 388.779804][T13308] dump_stack+0x107/0x163 [ 388.784189][T13308] should_fail.cold+0x5/0xa [ 388.788742][T13308] ? kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 388.794579][T13308] should_failslab+0x5/0x10 [ 388.799106][T13308] kmem_cache_alloc+0x5b/0x440 [ 388.803911][T13308] kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 388.809591][T13308] mmu_topup_memory_caches+0x1f/0xd0 [ 388.814912][T13308] kvm_mmu_load+0x7d/0xff0 [ 388.819357][T13308] ? inject_pending_event+0x5c5/0x1240 [ 388.824871][T13308] vcpu_enter_guest+0x2c69/0x4160 [ 388.829937][T13308] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 388.836220][T13308] ? lock_release+0x710/0x710 [ 388.840932][T13308] ? mark_held_locks+0x9f/0xe0 [ 388.845744][T13308] ? kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 388.851514][T13308] kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 388.857108][T13308] kvm_vcpu_ioctl+0x467/0xd90 [ 388.861818][T13308] ? kvm_io_bus_write+0x280/0x280 [ 388.866881][T13308] ? generic_block_fiemap+0x60/0x60 [ 388.872112][T13308] ? lock_downgrade+0x6d0/0x6d0 [ 388.876989][T13308] ? __mutex_unlock_slowpath+0xe2/0x610 [ 388.882589][T13308] ? __fget_files+0x288/0x3d0 [ 388.887297][T13308] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 388.893572][T13308] ? kvm_io_bus_write+0x280/0x280 [ 388.898627][T13308] __x64_sys_ioctl+0x193/0x200 [ 388.903421][T13308] do_syscall_64+0x2d/0x70 [ 388.907857][T13308] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 388.913772][T13308] RIP: 0033:0x45e219 [ 388.917681][T13308] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.937330][T13308] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.945763][T13308] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 [ 388.953748][T13308] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 388.961834][T13308] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 388.969820][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 388.977807][T13308] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c 23:07:57 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:07:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5508) 23:07:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) 23:07:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x541b) 23:07:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5509) 23:08:00 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5508) 23:08:00 executing program 4 (fault-call:11 fault-nth:4): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:08:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x541d) 23:08:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) 23:08:00 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 391.905305][T13364] FAULT_INJECTION: forcing a failure. [ 391.905305][T13364] name failslab, interval 1, probability 0, space 0, times 0 [ 391.978634][ T35] audit: type=1326 audit(1609974480.730:41): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13369 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 391.996573][T13364] CPU: 1 PID: 13364 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 392.007591][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.017664][T13364] Call Trace: [ 392.020965][T13364] dump_stack+0x107/0x163 [ 392.025337][T13364] should_fail.cold+0x5/0xa [ 392.029876][T13364] ? kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 392.035711][T13364] should_failslab+0x5/0x10 [ 392.040249][T13364] kmem_cache_alloc+0x5b/0x440 [ 392.045064][T13364] kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 392.050785][T13364] mmu_topup_memory_caches+0x1f/0xd0 [ 392.056138][T13364] kvm_mmu_load+0x7d/0xff0 [ 392.060585][T13364] ? inject_pending_event+0x5c5/0x1240 [ 392.066084][T13364] vcpu_enter_guest+0x2c69/0x4160 [ 392.071158][T13364] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 392.077440][T13364] ? lock_release+0x710/0x710 [ 392.082186][T13364] ? mark_held_locks+0x9f/0xe0 [ 392.086987][T13364] ? kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 392.092735][T13364] kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 392.098318][T13364] kvm_vcpu_ioctl+0x467/0xd90 [ 392.103028][T13364] ? kvm_io_bus_write+0x280/0x280 [ 392.108087][T13364] ? generic_block_fiemap+0x60/0x60 [ 392.113309][T13364] ? lock_downgrade+0x6d0/0x6d0 [ 392.118195][T13364] ? __mutex_unlock_slowpath+0xe2/0x610 [ 392.123780][T13364] ? __fget_files+0x288/0x3d0 [ 392.128488][T13364] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 392.134784][T13364] ? kvm_io_bus_write+0x280/0x280 [ 392.139838][T13364] __x64_sys_ioctl+0x193/0x200 [ 392.144630][T13364] do_syscall_64+0x2d/0x70 [ 392.149068][T13364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 392.155016][T13364] RIP: 0033:0x45e219 [ 392.159625][T13364] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:08:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) 23:08:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5421) [ 392.179254][T13364] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.187692][T13364] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 [ 392.195681][T13364] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 392.203669][T13364] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 392.211660][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 392.219649][T13364] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c 23:08:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5509) 23:08:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) 23:08:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) 23:08:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5423) 23:08:03 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:03 executing program 4 (fault-call:11 fault-nth:5): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:08:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5513) 23:08:03 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) 23:08:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5450) 23:08:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5451) [ 394.942292][T13411] FAULT_INJECTION: forcing a failure. [ 394.942292][T13411] name failslab, interval 1, probability 0, space 0, times 0 [ 394.972593][T13411] CPU: 0 PID: 13411 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 394.981401][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:08:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) 23:08:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) [ 394.991482][T13411] Call Trace: [ 394.994777][T13411] dump_stack+0x107/0x163 [ 394.999145][T13411] should_fail.cold+0x5/0xa [ 395.003677][T13411] ? kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 395.009516][T13411] should_failslab+0x5/0x10 [ 395.014053][T13411] kmem_cache_alloc+0x5b/0x440 [ 395.018859][T13411] kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 395.024560][T13411] mmu_topup_memory_caches+0x1f/0xd0 [ 395.029898][T13411] kvm_mmu_load+0x7d/0xff0 [ 395.034346][T13411] ? inject_pending_event+0x5c5/0x1240 [ 395.039841][T13411] vcpu_enter_guest+0x2c69/0x4160 [ 395.044914][T13411] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 395.051186][T13411] ? lock_release+0x710/0x710 [ 395.055920][T13411] ? mark_held_locks+0x9f/0xe0 [ 395.060738][T13411] ? kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 395.066491][T13411] kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 395.072092][T13411] kvm_vcpu_ioctl+0x467/0xd90 [ 395.076804][T13411] ? kvm_io_bus_write+0x280/0x280 [ 395.081866][T13411] ? generic_block_fiemap+0x60/0x60 [ 395.087096][T13411] ? lock_downgrade+0x6d0/0x6d0 [ 395.091977][T13411] ? __mutex_unlock_slowpath+0xe2/0x610 [ 395.097566][T13411] ? __fget_files+0x288/0x3d0 [ 395.102279][T13411] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 395.108558][T13411] ? kvm_io_bus_write+0x280/0x280 [ 395.113623][T13411] __x64_sys_ioctl+0x193/0x200 [ 395.118416][T13411] do_syscall_64+0x2d/0x70 [ 395.122853][T13411] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 395.128768][T13411] RIP: 0033:0x45e219 [ 395.132686][T13411] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.152308][T13411] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.160740][T13411] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 [ 395.168733][T13411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 395.176715][T13411] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 395.184699][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 395.192687][T13411] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c [ 395.229299][ T35] audit: type=1326 audit(1609974483.990:42): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13417 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5513) 23:08:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5452) 23:08:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5546) 23:08:06 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) 23:08:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5563) 23:08:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5460) 23:08:06 executing program 4 (fault-call:11 fault-nth:6): openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:08:06 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5502) 23:08:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x6364) [ 398.058613][T13461] FAULT_INJECTION: forcing a failure. [ 398.058613][T13461] name failslab, interval 1, probability 0, space 0, times 0 [ 398.072016][ T35] audit: type=1326 audit(1609974486.810:43): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13470 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 398.147802][T13461] CPU: 1 PID: 13461 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 398.156644][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.166727][T13461] Call Trace: [ 398.170034][T13461] dump_stack+0x107/0x163 [ 398.174412][T13461] should_fail.cold+0x5/0xa [ 398.178954][T13461] ? kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 398.184785][T13461] should_failslab+0x5/0x10 [ 398.189322][T13461] kmem_cache_alloc+0x5b/0x440 [ 398.194114][T13461] kvm_mmu_topup_memory_cache+0xbe/0x1f0 [ 398.199780][T13461] mmu_topup_memory_caches+0x1f/0xd0 [ 398.205096][T13461] kvm_mmu_load+0x7d/0xff0 [ 398.209532][T13461] ? inject_pending_event+0x5c5/0x1240 [ 398.215024][T13461] vcpu_enter_guest+0x2c69/0x4160 [ 398.220092][T13461] ? kvm_vcpu_reload_apic_access_page+0x80/0x80 [ 398.226369][T13461] ? lock_release+0x710/0x710 [ 398.231074][T13461] ? mark_held_locks+0x9f/0xe0 [ 398.235879][T13461] ? kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 398.241618][T13461] kvm_arch_vcpu_ioctl_run+0x440/0x1970 [ 398.247208][T13461] kvm_vcpu_ioctl+0x467/0xd90 [ 398.251921][T13461] ? kvm_io_bus_write+0x280/0x280 [ 398.256977][T13461] ? generic_block_fiemap+0x60/0x60 [ 398.262208][T13461] ? lock_downgrade+0x6d0/0x6d0 [ 398.267084][T13461] ? __mutex_unlock_slowpath+0xe2/0x610 [ 398.272687][T13461] ? __fget_files+0x288/0x3d0 [ 398.277400][T13461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 398.283693][T13461] ? kvm_io_bus_write+0x280/0x280 [ 398.288756][T13461] __x64_sys_ioctl+0x193/0x200 [ 398.293547][T13461] do_syscall_64+0x2d/0x70 [ 398.298069][T13461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 398.303986][T13461] RIP: 0033:0x45e219 [ 398.307898][T13461] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.327523][T13461] RSP: 002b:00007f4c8a9a6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.335962][T13461] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000045e219 23:08:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5546) 23:08:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5503) 23:08:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 398.343946][T13461] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 398.351931][T13461] RBP: 00007f4c8a9a6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 398.359912][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 398.367902][T13461] R13: 00000000016afb5f R14: 00007f4c8a9a79c0 R15: 000000000119bf8c [ 398.465557][ T35] audit: type=1326 audit(1609974487.220:44): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13486 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5505) 23:08:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8902) 23:08:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5563) 23:08:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5507) [ 398.653175][ T35] audit: type=1326 audit(1609974487.410:45): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13499 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:07 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:08:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8912) 23:08:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5603) 23:08:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5508) 23:08:07 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 399.002932][ T35] audit: type=1326 audit(1609974487.760:46): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13519 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8913) 23:08:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x6364) 23:08:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5509) 23:08:07 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 399.157272][ T35] audit: type=1326 audit(1609974487.910:47): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13530 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:08 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 399.292024][ T35] audit: type=1326 audit(1609974488.050:48): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13543 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:08 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x2, 0x0) 23:08:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x890d) 23:08:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8914) 23:08:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x550b) [ 399.469920][ T35] audit: type=1326 audit(1609974488.230:49): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13545 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8912) 23:08:08 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x891c) 23:08:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x550f) 23:08:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8913) 23:08:08 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x10, 0x0) 23:08:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) 23:08:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8914) 23:08:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5510) 23:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x89f3) 23:08:09 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4c01, 0x0) [ 400.371610][ T35] audit: type=1326 audit(1609974489.130:50): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13606 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x89f4) 23:08:09 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) 23:08:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5513) 23:08:09 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x541b, 0x0) 23:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae01) 23:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae41) 23:08:09 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff, 0x7, 0x80000001, 0x13e2, 0x20, 0x20004000000000, 0x0, 0x9}, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5525) 23:08:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x894c) 23:08:09 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x5421, 0x0) 23:08:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae80) 23:08:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8983) [ 401.360086][ T35] audit: type=1326 audit(1609974490.120:51): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13673 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:10 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) 23:08:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5546) 23:08:10 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x5450, 0x0) 23:08:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x937e) 23:08:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae01) 23:08:10 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 23:08:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5563) 23:08:10 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x5451, 0x0) 23:08:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae41) 23:08:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae60) 23:08:11 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448dd) 23:08:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x6364) 23:08:11 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x5452, 0x0) 23:08:11 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xae80) 23:08:11 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 23:08:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) 23:08:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8906) 23:08:11 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x5460, 0x0) 23:08:11 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:12 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045506) 23:08:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 23:08:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8907) 23:08:12 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x6364, 0x0) 23:08:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448dd) 23:08:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004550a) 23:08:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8912) 23:08:12 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8912, 0x0) 23:08:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045542) 23:08:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 23:08:15 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:08:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 23:08:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045506) 23:08:15 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8913) 23:08:15 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8913, 0x0) 23:08:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8914) 23:08:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004550a) 23:08:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:08:15 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8914, 0x0) 23:08:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 23:08:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8933) 23:08:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 23:08:18 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:08:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8982) 23:08:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 23:08:18 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8933, 0x0) 23:08:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 23:08:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xae01) 23:08:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 23:08:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:18 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae01, 0x0) 23:08:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:18 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) 23:08:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 23:08:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xae41) 23:08:18 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae41, 0x0) 23:08:18 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 23:08:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xae80) 23:08:19 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x400448c9, 0x0) 23:08:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 23:08:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:19 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) 23:08:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xff02) 23:08:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 23:08:19 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x400448dd, 0x0) 23:08:19 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 411.236408][ T35] audit: type=1326 audit(1609974499.990:52): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14058 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:20 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 23:08:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:08:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 23:08:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 23:08:20 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x400454ca, 0x0) [ 411.476150][ T35] audit: type=1326 audit(1609974500.230:53): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14080 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:20 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:08:20 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 23:08:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x400448dd) 23:08:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) 23:08:20 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x40049409, 0x0) [ 412.316763][ T35] audit: type=1326 audit(1609974501.070:54): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14119 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 23:08:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:08:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008240b) 23:08:21 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:21 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4004ae8b, 0x0) 23:08:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) [ 412.583552][ T35] audit: type=1326 audit(1609974501.340:55): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14139 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:21 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:08:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045506) 23:08:21 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40085503) 23:08:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) 23:08:21 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4004ae99, 0x0) [ 413.294885][ T35] audit: type=1326 audit(1609974502.050:56): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14172 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:22 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:08:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4004550a) 23:08:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40085503) 23:08:22 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x40186366, 0x0) [ 413.528415][ T35] audit: type=1326 audit(1609974502.280:57): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14187 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:22 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 413.750586][ T35] audit: type=1326 audit(1609974502.510:58): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14200 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:23 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:08:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40095505) 23:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045564) 23:08:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:08:23 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4020940d, 0x0) 23:08:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 23:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045565) 23:08:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008ae90) 23:08:23 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4020ae46, 0x0) 23:08:23 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) 23:08:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008af03) [ 414.767263][ T35] audit: type=1326 audit(1609974503.520:59): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14249 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40095505) 23:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045566) 23:08:24 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4048ae9b, 0x0) 23:08:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x401c5504) 23:08:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 23:08:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 23:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045567) 23:08:24 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4090ae82, 0x0) 23:08:24 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020ae46) 23:08:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) [ 415.735934][ T35] audit: type=1326 audit(1609974504.490:60): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14304 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045568) 23:08:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40189429) 23:08:24 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x4138ae84, 0x0) 23:08:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 23:08:25 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x41a0ae8d, 0x0) 23:08:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40045569) 23:08:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x401c5504) 23:08:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 23:08:25 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 23:08:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4004556a) [ 416.772996][ T35] audit: type=1326 audit(1609974505.530:61): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4090ae82) 23:08:25 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8004ae98, 0x0) 23:08:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020ae46) 23:08:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 23:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 23:08:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x41015500) 23:08:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4028af11) 23:08:26 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x80086301, 0x0) 23:08:26 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 23:08:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) [ 417.779711][ T35] audit: type=1326 audit(1609974506.540:62): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14424 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:26 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 23:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40049409) 23:08:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80085502) 23:08:26 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x80404804, 0x0) 23:08:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40085503) 23:08:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 23:08:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 23:08:27 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8090ae81, 0x0) 23:08:27 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:08:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4090ae82) [ 418.787460][ T35] audit: type=1326 audit(1609974507.540:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14481 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:27 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 23:08:27 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x8138ae83, 0x0) 23:08:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:08:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x41015500) 23:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40095505) 23:08:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00464c9) 23:08:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 23:08:28 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0x81a0ae8c, 0x0) 23:08:28 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 23:08:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80085502) [ 419.746204][T14539] ptrace attach of "/root/syz-executor.5"[14538] was attempted by "/root/syz-executor.5"[14539] [ 419.774052][ T35] audit: type=1326 audit(1609974508.530:64): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14535 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:28 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0085504) 23:08:28 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 23:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40186366) 23:08:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 23:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x401c5504) 23:08:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:08:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80184132) 23:08:29 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 23:08:29 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 23:08:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) [ 420.740875][T14596] ptrace attach of "/root/syz-executor.5"[14594] was attempted by "/root/syz-executor.5"[14596] [ 420.759907][ T35] audit: type=1326 audit(1609974509.510:65): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14596 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:29 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:29 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc0189436, 0x0) 23:08:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:08:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc01c64a3) 23:08:29 executing program 5: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4020ae46) [ 421.199949][ T35] audit: type=1326 audit(1609974509.960:66): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14606 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:08:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 23:08:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x40309410) 23:08:30 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc018ae85, 0x0) 23:08:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 23:08:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0085504) 23:08:30 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 23:08:30 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc020660b, 0x0) 23:08:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x17) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0xfffb, 0x2, 0x4}, 0x41, [0x4, 0x1, 0x5, 0x7ff, 0x1, 0xce, 0x80, 0xfffff000, 0x7fff, 0x771, 0x5, 0xffff, 0x3, 0x4, 0x200, 0x3, 0x5, 0xf, 0x85aa, 0x7, 0x20, 0x3, 0x40, 0x20, 0x93, 0xfffffffe, 0x0, 0x9, 0x9, 0x3, 0x4, 0xffffff12, 0xa8, 0x6, 0x1, 0xffff, 0x8, 0xabb, 0x5, 0x69, 0x7ff, 0x81, 0x1, 0x5, 0x2, 0x8, 0x0, 0x1, 0x2, 0xdc99, 0x6, 0x1f, 0xfffffffc, 0x1, 0x7a69be18, 0x8000, 0x7fffffff, 0x10001, 0x81, 0xffff, 0x7, 0x9, 0x4], [0x6, 0x7fffffff, 0x73, 0xfffff001, 0x9, 0xb8c0, 0x5, 0x744a, 0x8, 0x2, 0x7, 0x744, 0x9, 0x10001, 0x10, 0x1, 0x4, 0x3, 0x1f, 0x5, 0x4, 0xbc60, 0xffffffff, 0x18, 0x5, 0xffffff00, 0xfffffffd, 0x4b2e8c41, 0x6, 0x823, 0x0, 0x800, 0x7, 0x4a, 0x4, 0x7, 0x0, 0x1, 0x1ff, 0x1000, 0x1, 0x200, 0xffffff00, 0x7, 0x4, 0x6, 0x7ff, 0x3, 0x0, 0x1, 0x8, 0xffff, 0x1ff, 0x3d, 0xc9fc, 0x8, 0x2, 0x6, 0x0, 0x2, 0x1, 0x6, 0x9, 0x1ff], [0x5bc3, 0x588, 0x40, 0x5, 0x4, 0x8000, 0x7f, 0x7, 0xe7, 0x1, 0x4d, 0x3, 0x7fff, 0x7fffffff, 0x9, 0x7, 0x9, 0x10001, 0x1, 0xffffffc1, 0x1, 0x800, 0x85e, 0x5d1, 0x3ff, 0x7ff, 0x9aebd668, 0x6, 0x0, 0xfff, 0x7f, 0x1000, 0x6, 0x65b, 0x40, 0x0, 0x0, 0x6, 0x54, 0x8000, 0x9, 0x5, 0xffffff4a, 0x3, 0x1, 0x6, 0xd54, 0x80000001, 0xe51, 0x4, 0x93, 0x3, 0x3f, 0x8, 0x8, 0xfffffffc, 0x10000, 0x2, 0x1, 0x5, 0x400, 0x5, 0x9, 0x5], [0x386, 0x0, 0xfffffffb, 0x6, 0x0, 0xa25d, 0x8, 0x101, 0x7ff, 0x3, 0x7fffffff, 0xd1, 0x7, 0x40, 0x9d1f, 0x53, 0xff, 0xffffffff, 0x2, 0x6, 0x9, 0x9, 0x1, 0x5, 0x1, 0x7fffffff, 0x4, 0x10000, 0x7f, 0x0, 0xb535, 0x1, 0x80000000, 0x9, 0x1, 0x3, 0x4, 0x9, 0x80000001, 0x9, 0x200, 0x5, 0x10001, 0x10001, 0xffffff47, 0x80000000, 0x20, 0x4, 0x9, 0x80, 0x80008, 0x81, 0x7, 0x42c, 0x9, 0xfffffff7, 0xffffffff, 0x0, 0x7, 0x720, 0x0, 0x4, 0x3, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:08:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 422.080854][ T35] audit: type=1326 audit(1609974510.840:67): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14665 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 422.095366][T14666] input: syz1 as /devices/virtual/input/input593 23:08:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 422.220543][T14674] input: syz1 as /devices/virtual/input/input598 23:08:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc01064ce) 23:08:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x7, 0x3, 0x7, 0x0, 0x3, 0x8, 0x6, 0x9, 0x80, 0x7, 0x7f, 0xf2, 0x0, 0x8, 0x7, 0x3f, 0x20, 0x9, 0x1, [], 0x5, 0x9}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r3 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x4, 0x0, [{0x0, 0x9, 0x9, 0x7, 0x3}, {0xd, 0x22, 0x8, 0x40ec8cd4, 0xff}, {0x6, 0x8, 0x7, 0xe2, 0x8f}, {0xd, 0x8, 0x9, 0x1f, 0x6}]}) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x120000, 0xda8c0) 23:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 23:08:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:31 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xc020f509, 0x0) [ 422.416618][ T35] audit: type=1326 audit(1609974511.170:68): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14695 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 422.509742][T14702] input: syz1 as /devices/virtual/input/input601 [ 422.563282][ T35] audit: type=1326 audit(1609974511.320:69): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14711 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 422.590542][T14713] input: syz1 as /devices/virtual/input/input604 23:08:31 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 23:08:31 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x4090ae82) 23:08:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x3, 0x0, 0x4, 0xff}, 'syz1\x00', 0x14}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x155300, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack_expect\x00') ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x40, 0x1ff, 0xff, 0x8}, 'syz1\x00', 0x31}) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000000c0)={0x7fff, {0x4, 0x80, 0x6, 0x4000000, 0xdcf, 0x1}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x3a72, 0x1, 0x401, 0x1ff}, 0x57, [0x5, 0x2, 0xffffffff, 0x0, 0x9, 0x6, 0x4, 0x200, 0x0, 0x20, 0x7, 0x101, 0x4, 0x3ff, 0x9, 0xffffffff, 0x2, 0x3, 0x9, 0x40, 0x7, 0x0, 0x1, 0x2f, 0x4, 0x7ff, 0xe855, 0x39, 0x74ed, 0xcb08, 0x1f, 0xdbf5, 0x3, 0xfd91, 0x40000000, 0x1, 0x0, 0x2, 0x4, 0x6, 0x8, 0x7, 0xfffffffa, 0xffffff96, 0x1, 0x9, 0x3f81, 0xdec, 0x4, 0x9, 0x7ff, 0x1, 0x7, 0x9, 0x4, 0x5, 0x2, 0x4, 0x0, 0x3, 0xfffffffd, 0x5, 0x5, 0x1000], [0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x0, 0x4, 0x10001, 0x3, 0x7e908ed1, 0x69c, 0x0, 0xfffffffd, 0x3177, 0x4, 0x1004000, 0x800, 0x3, 0x0, 0x6, 0x1, 0xfffffff7, 0x0, 0x30, 0x4a, 0x4, 0x2, 0x4, 0x5, 0xc7de, 0xffffffff, 0xbbb0, 0x9, 0x1, 0x1b, 0x84, 0xef0, 0xfff, 0xffff, 0x5, 0x0, 0x220, 0x2, 0x7fffffff, 0x7, 0x9, 0x3, 0x0, 0x8, 0x1, 0x5, 0x1f, 0xa8c8, 0x200, 0xba, 0x7, 0x7, 0x927a, 0x1, 0x1, 0xdef, 0x100], [0x9, 0x0, 0x4a6, 0x9, 0x1, 0x8, 0xfffffffd, 0x2, 0x20, 0x803, 0xfffffffc, 0xfffffffd, 0xffffffff, 0x1ff, 0x0, 0x9, 0x7ff, 0x1000, 0x0, 0x3, 0x0, 0x68, 0x66, 0x2, 0x3, 0x0, 0x100, 0xfffffffa, 0xfff, 0x1ff, 0x9, 0x6, 0x20c, 0x3, 0x3f, 0x80, 0x0, 0x400, 0x7f, 0x6, 0x5, 0x1, 0x0, 0x2, 0x7, 0x40, 0xd07, 0xfffffff9, 0x6, 0x401, 0xfffff0c0, 0xffff7fff, 0x9, 0xfff, 0x8, 0x400, 0x2, 0x6f, 0xc0000000, 0x7, 0x64b1fd8, 0x401, 0x0, 0x7], [0x4, 0x3, 0xfff, 0x5, 0x5, 0x401, 0x3, 0xf89, 0x10001, 0xfffffd03, 0x20, 0x1, 0x4, 0x1000, 0x7b4, 0x5, 0x401, 0xffffffff, 0x2, 0x100, 0x0, 0x8e37, 0x81, 0x0, 0x9, 0x80000001, 0x1, 0xb31, 0x7ff, 0x8001, 0xee, 0xfff, 0x20, 0x80, 0x3, 0x10000, 0xa45f, 0x400, 0xff, 0x10000, 0x6f, 0x6, 0x6, 0x1, 0x5, 0x0, 0x0, 0x80000001, 0x3, 0x91ba, 0x9, 0x3f, 0x3f, 0x20, 0x8001, 0x4, 0x0, 0x401, 0x9, 0x8e4, 0x3b, 0x3, 0x7, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:31 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x2) [ 423.175155][T14743] ptrace attach of "/root/syz-executor.5"[14742] was attempted by "/root/syz-executor.5"[14743] [ 423.198698][ T35] audit: type=1326 audit(1609974511.950:70): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14736 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 423.224462][T14741] input: syz1 as /devices/virtual/input/input607 23:08:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 23:08:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x41015500) 23:08:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x5, {0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) readahead(r0, 0x8, 0x9) 23:08:32 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x3) [ 423.471916][T14770] input: syz1 as /devices/virtual/input/input615 23:08:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 23:08:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8004552d) [ 423.525182][T14777] input: syz1 as /devices/virtual/input/input616 23:08:32 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:32 executing program 2: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x109041, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x4, 0x0, 0x0, 0x2}, 'syz1\x00', 0xfffff9}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:08:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) fcntl$setsig(r0, 0xa, 0x25) 23:08:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x80085502) 23:08:32 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x4) 23:08:32 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 424.240330][T14814] ptrace attach of "/root/syz-executor.5"[14810] was attempted by "/root/syz-executor.5"[14814] [ 424.253127][T14809] input: syz1 as /devices/virtual/input/input622 [ 424.262889][ T35] audit: type=1326 audit(1609974513.020:71): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14806 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 424.336351][T14820] input: syz1 as /devices/virtual/input/input624 23:08:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8008563f) 23:08:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x30, {0x0, 0x0, 0x0, 0x0, 0x8000}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) dup(r0) 23:08:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x200}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) pipe(&(0x7f0000000080)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:33 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x5) [ 424.572752][T14841] input: syz1 as /devices/virtual/input/input625 23:08:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x800}, 'syz0\x00', 0xe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 424.621915][T14849] input: syz1 as /devices/virtual/input/input630 23:08:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x80086301) [ 424.812311][T14865] input: syz0 as /devices/virtual/input/input633 [ 424.837332][T14872] input: syz0 as /devices/virtual/input/input634 23:08:33 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x8038550a) 23:08:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0xfff, 0x3, 0x2, 0x8}, 0xa, [0x5, 0x7, 0x9, 0x7fff, 0x7, 0x3f, 0x3c, 0xffff, 0x100, 0xdc, 0x9, 0x3, 0x5, 0x0, 0x2, 0x5, 0x9, 0x7f, 0x7, 0x6, 0x5, 0x9, 0x1, 0x1, 0x3, 0x6, 0x6, 0xfffffff8, 0x8f4a, 0x1, 0x2, 0x6, 0x6, 0x7, 0x1, 0xfa9a, 0x8001, 0x3ff, 0x9, 0x20, 0x260, 0x7, 0x4, 0x1000, 0x0, 0x9, 0x8, 0x1, 0x9, 0x5, 0x5, 0xacde, 0x8000, 0x1000, 0x52b, 0x5, 0xffff0001, 0x68602d87, 0x8, 0xfffffffe, 0x1, 0x7fffffff, 0x1ff, 0x80000000], [0x2, 0xb, 0x8d25, 0x65f, 0x8001, 0x1, 0x3, 0x5, 0x0, 0x3, 0x7, 0x20, 0x80000000, 0x1f, 0x7, 0xece6, 0x9, 0x10001, 0xffff7fff, 0x200, 0x8, 0x8, 0x80000001, 0x3, 0x8, 0x2, 0x0, 0x9, 0x81, 0xffffffff, 0x1, 0x3000, 0x1000, 0x6, 0x0, 0x2, 0x4, 0x9, 0x8, 0x5, 0x5, 0x9, 0x3f, 0x4, 0x10000, 0x200, 0x39, 0x3, 0x9, 0xfffff801, 0x0, 0x8000, 0x7, 0x8, 0xdb, 0x4, 0xcc, 0x8, 0x6, 0x8000, 0x1ef, 0x6, 0x100, 0x9], [0x7f, 0x5, 0x9, 0x4, 0x6a4e, 0xc4, 0x5f51, 0x101, 0xfd3c, 0x5, 0x7fffffff, 0x0, 0x8c2e, 0x7, 0xc0000003, 0x84, 0x8, 0x0, 0x4, 0x5, 0x9, 0x4, 0x6, 0x3, 0x8, 0x0, 0x9, 0x1000, 0xfffffffc, 0x1ff, 0x200, 0x314, 0x1, 0x4, 0xfb9d, 0x3, 0x7, 0x8, 0x3, 0x9, 0x0, 0x16, 0xc0000000, 0x1, 0x8, 0xfffffff8, 0x0, 0x80, 0x3, 0x1, 0x3, 0x401, 0x1000, 0x7e17, 0x859, 0xfffffffa, 0x3ff, 0x8000, 0x5, 0x800, 0x6, 0x3, 0x9, 0x76], [0xfffffff7, 0xeb7, 0x1f, 0x6, 0x9, 0x1f, 0x80, 0x3, 0x5, 0x1, 0xd3be, 0x8001, 0x3, 0x6, 0x5, 0x9, 0x10001, 0x4908, 0xffffffff, 0x3, 0x7f, 0x4, 0x10000, 0x10000, 0x401, 0x7fffffff, 0x20, 0x8000, 0x1, 0x0, 0x1000000, 0x8000, 0x8, 0x6, 0x1f, 0x8001, 0x5, 0x8, 0x0, 0x8, 0x5, 0x40, 0x8, 0x80000000, 0x0, 0x95, 0xe2000000, 0x5, 0x7, 0x20, 0x4, 0xff, 0x7, 0x7, 0x7fffffff, 0x6, 0x3ae7, 0x10000, 0x0, 0x8, 0x8f90, 0x48f1, 0x1000, 0x7]}, 0x45c) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101000, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x7fff, 0x6, 0x1ff, 0x2fae}, 'syz1\x00', 0x53}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x103100, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000280)=[{{}, 0x14, 0x8, 0xcd}, {{0x0, 0xea60}, 0x15, 0x101, 0x6}, {{0x77359400}, 0x2, 0x100, 0x80000000}, {{r5, r6/1000+60000}, 0x14, 0x9f9d, 0x3383}, {{0x77359400}, 0x2, 0x6, 0x5}, {{0x0, 0x2710}, 0x4, 0x604, 0x2}], 0x90) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0xff2f, 0x0, 0x9, 0x80}, 'syz1\x00', 0x26}) 23:08:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:33 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x6) 23:08:33 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 425.238204][T14889] input: syz1 as /devices/virtual/input/input635 [ 425.245153][T14890] ptrace attach of "/root/syz-executor.5"[14888] was attempted by "/root/syz-executor.5"[14890] [ 425.269112][ T35] audit: type=1326 audit(1609974514.020:72): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14886 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 425.321505][T14891] input: syz1 as /devices/virtual/input/input637 [ 425.343914][T14899] input: syz1 as /devices/virtual/input/input636 [ 425.379917][T14891] input: syz1 as /devices/virtual/input/input640 23:08:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 23:08:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x80, 0x88000) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1e) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x6}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000080)) 23:08:34 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x7) 23:08:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc0045878) [ 425.637050][T14929] input: syz1 as /devices/virtual/input/input643 [ 425.641736][T14930] input: syz1 as /devices/virtual/input/input644 [ 425.712625][T14945] input: syz1 as /devices/virtual/input/input646 23:08:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x4, 0xfffffffe, 0x0, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xfffe}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 425.894157][T14959] input: syz0 as /devices/virtual/input/input649 [ 425.933198][T14965] input: syz0 as /devices/virtual/input/input650 23:08:35 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:35 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x8) 23:08:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$input_event(r2, &(0x7f0000000080)={{0x77359400}, 0x16, 0x8, 0x8000}, 0x18) 23:08:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc0085504) 23:08:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:35 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 426.364744][T14983] input: syz1 as /devices/virtual/input/input652 [ 426.366561][T14981] input: syz1 as /devices/virtual/input/input651 [ 426.428620][ T35] audit: type=1326 audit(1609974515.180:73): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14976 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 426.430895][T14998] input: syz1 as /devices/virtual/input/input655 23:08:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) [ 426.483162][T15002] input: syz1 as /devices/virtual/input/input656 23:08:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x8, 0xc82, 0x8000, 0x3}, 0x2b, [0xea, 0x1, 0x3, 0x50c, 0x7, 0x5, 0x800000, 0x5, 0xffffffff, 0x8, 0x6, 0x4, 0x4, 0x5, 0x4000, 0x6, 0x7, 0xff, 0x6, 0xfffffe01, 0x155b, 0x0, 0x1, 0x57, 0xfffffffd, 0x8, 0xae, 0x1, 0x81, 0x10001, 0x7, 0x101, 0x24d, 0x2, 0x2, 0xfffffffd, 0x7fffffff, 0x5, 0x100, 0x6, 0x1, 0x9, 0x6, 0x2, 0x0, 0x57c, 0x3, 0x5, 0x46f8, 0x8, 0x7f, 0xfffffe00, 0x1, 0x8, 0x4, 0x6, 0x4, 0x8, 0x200, 0x1, 0x3, 0x80000001, 0xd84, 0x7ff], [0x1, 0x4, 0x0, 0x3f, 0x0, 0x202c, 0x81, 0x5, 0x1, 0x401, 0xfff, 0x6, 0x40, 0x8, 0x6, 0x1f, 0x40, 0x4ed, 0x800, 0x6, 0x40, 0x766, 0x8001, 0x7fffffff, 0x3f, 0x1, 0x7fffffff, 0x7, 0x2, 0x2, 0xf28, 0x7f, 0x4, 0x8, 0x8, 0x1, 0x3, 0x0, 0x1, 0x6, 0xda18, 0x4, 0x4, 0xffff, 0x0, 0x7, 0x3ff, 0xc0d5, 0x800, 0x4, 0x99, 0x2, 0x88, 0xffff, 0x6, 0x2, 0x4, 0x4, 0x0, 0x8, 0x5, 0x9, 0x7, 0x8001], [0x0, 0x10000, 0x209f, 0x80, 0x5, 0x400, 0xfffffc01, 0x0, 0x3, 0x5, 0xf15d, 0xa2d0, 0x10001, 0x80000001, 0x7fffffff, 0x1, 0x903, 0x6, 0x1, 0x7bb, 0x2a, 0x8, 0x8, 0x70, 0x7fffffff, 0x401, 0x0, 0x9, 0x13, 0x85e, 0x8, 0xd4c9, 0x2, 0xa461, 0x5, 0x10001, 0x184, 0x582, 0x80000001, 0x1, 0x6, 0x100, 0x7f, 0x2, 0xe9fd, 0x7, 0xfffff801, 0x200, 0x1, 0x2f, 0x80000000, 0x5, 0x1000, 0x3f, 0x80, 0x1b, 0x6, 0x8, 0x17, 0x6, 0x3ff, 0x80000000, 0x0, 0x4], [0xf8000000, 0xa03, 0x1, 0x4, 0x80, 0x164d, 0x9, 0x8001, 0x8, 0x4736, 0x6, 0x8, 0x1, 0xd30c, 0x8, 0xffffff80, 0x4, 0x2, 0xa0000, 0x401, 0x6, 0x9, 0x9, 0x400, 0x40, 0x6, 0x3fe, 0x7, 0x9, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0xffffcf37, 0x5a1, 0x0, 0x5, 0x3, 0xfffff800, 0x100, 0x200, 0xd847, 0x3, 0xed, 0x6, 0x5, 0x1, 0x3, 0x401, 0x9, 0xfffff050, 0x80000001, 0x7fffffff, 0x3, 0x1, 0x4, 0x6, 0xfffffeff, 0x6, 0x3, 0x3, 0xb6]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x2, {0x8f8e, 0x401, 0x5, 0x7, 0x5, 0x3f}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) 23:08:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:35 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x9) 23:08:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc0189436) [ 426.725062][T15020] input: syz1 as /devices/virtual/input/input659 [ 426.750698][T15022] input: syz1 as /devices/virtual/input/input660 [ 426.800253][T15031] input: syz1 as /devices/virtual/input/input661 [ 426.833116][T15038] input: syz1 as /devices/virtual/input/input662 23:08:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{0x60, 0x3, 0x52, 0x81}, 'syz1\x00', 0x20}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 427.014610][T15054] input: syz1 as /devices/virtual/input/input665 [ 427.047042][T15059] input: syz1 as /devices/virtual/input/input666 23:08:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x3f) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r5, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x34}, 0xc3, 0x0, 0x0, 0x2, 0x7fff, 0x8000}, &(0x7f00000001c0)=0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40040, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000140)) write$input_event(r4, &(0x7f0000000080)={{0x0, 0x2710}, 0x3, 0x7, 0x6}, 0x18) 23:08:36 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xa) 23:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 23:08:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:36 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:36 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 427.340097][T15076] input: syz1 as /devices/virtual/input/input668 [ 427.347383][T15077] input: syz1 as /devices/virtual/input/input670 [ 427.403220][ T35] audit: type=1326 audit(1609974516.160:74): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15072 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 427.435113][T15077] input: syz1 as /devices/virtual/input/input672 23:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) [ 427.450371][T15095] input: syz1 as /devices/virtual/input/input671 23:08:36 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xb) 23:08:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x2200, 0x0, 0x0, 0xfffffffc, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x57}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$input_event(r0, &(0x7f00000000c0)={{r1, r2/1000+10000}, 0x16, 0x1, 0x1}, 0x18) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x5, 0x7, 0x40, 0x0, 0x334d, 0x41042, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x2}, 0x41008, 0x3, 0x0, 0x2, 0x3, 0x0, 0x3}, 0x0, 0xf, r4, 0x9) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x3, 0xdb91, 0x1, 0x5c58}, 'syz1\x00', 0x51}) 23:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x3, {0x9b, 0x3, 0xfffffffe, 0x0, 0x9}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 427.723714][T15122] input: syz1 as /devices/virtual/input/input675 [ 427.772894][T15126] input: syz1 as /devices/virtual/input/input676 [ 427.784225][T15131] input: syz1 as /devices/virtual/input/input677 23:08:36 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xc) [ 427.835746][T15141] input: syz1 as /devices/virtual/input/input678 23:08:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) dup3(r0, 0xffffffffffffffff, 0x0) [ 427.889704][T15143] input: syz1 as /devices/virtual/input/input679 23:08:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write(r2, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0xfffffff9}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000380)={{r2}, "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"}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x72c4, 0x6, 0x2, 0x4}, 0x2, [0x0, 0x3ff, 0x40, 0xe0, 0x1ff, 0x2fbc, 0xffff, 0x8, 0x80000001, 0x8, 0x9, 0x9, 0x3, 0x3, 0x2, 0x3f, 0x1, 0x5, 0x8, 0x23b, 0xfffffffd, 0x6, 0x3ff, 0x1, 0x10001, 0x0, 0x7, 0xeb7, 0x1ff, 0x9, 0x1, 0x2, 0x1, 0x9, 0x5, 0xffff, 0x0, 0x80000000, 0x53b41b10, 0x8, 0xc982, 0x6, 0xfffffff7, 0x3f, 0x2, 0x3, 0x6, 0x1, 0xc43, 0x9, 0x6c00, 0x2, 0x5, 0x1, 0x9, 0x9, 0x4, 0x0, 0x4, 0x7f, 0xcbc, 0x2, 0x20, 0x270cbf2], [0x0, 0x3df, 0x9, 0x80000000, 0xfff, 0x7f, 0x80, 0x100, 0x9, 0x8, 0x3ff, 0x200, 0xc16, 0x100, 0x1, 0x5, 0x5075, 0x1, 0xfff80000, 0x0, 0xfff, 0x6, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0xa7e1, 0x8, 0x0, 0xfff, 0x80000000, 0x1000, 0x7e2e, 0x1, 0x5a, 0x20, 0x7, 0x1, 0x4, 0x5, 0x4, 0x7, 0x3f, 0x4, 0xffffffff, 0x7ff, 0x8, 0x4, 0x5, 0x3, 0x7, 0x20, 0x1, 0x3, 0xfffffff7, 0xffff, 0x1, 0x9, 0x3, 0x1, 0x3ff, 0xfffffff8, 0xc58], [0x8001, 0x8, 0x6, 0x10001, 0x101, 0x20, 0x0, 0x80, 0x0, 0x400, 0x80000001, 0x0, 0xffffffe8, 0xffffffff, 0x40, 0x7, 0x553, 0x8, 0xfffffffe, 0x8, 0xe2, 0x2, 0xfffffeff, 0x218245dc, 0x0, 0x2fa0, 0x6, 0x6000, 0x400, 0x400, 0x7, 0x0, 0x8, 0x6, 0x7, 0x2323, 0x5, 0x2, 0x2, 0x4e, 0x8, 0xf000000, 0x4, 0x5101, 0x8, 0x800, 0xce, 0x5, 0x0, 0x6, 0x0, 0x67, 0x6, 0x1, 0x6, 0x6, 0x0, 0xffff, 0x3, 0x3ff, 0x4, 0x200, 0x65000000], [0x0, 0x3, 0x20, 0x5, 0x1cec, 0xffffff7f, 0x101, 0x8, 0x1, 0x20, 0x1, 0x10000, 0xa3, 0x1, 0x20, 0x2, 0x6000000, 0x1000, 0x80000001, 0x9db, 0x27, 0x6, 0x4, 0xcaf7, 0x2, 0x18, 0x3818, 0x4, 0x8, 0x8, 0x1000, 0x80, 0x3, 0x200, 0x6, 0x40, 0x100, 0x6, 0x9, 0x2, 0x9, 0x1, 0x8000, 0x4, 0x8, 0xffff, 0x2, 0x0, 0x8, 0x2000000, 0x1, 0xb4a, 0x4, 0x2, 0x400, 0x3, 0x5ec, 0x8, 0x7fff, 0x2, 0x7, 0x6, 0x1, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 428.038432][T15158] input input681: cannot allocate more than FF_MAX_EFFECTS effects [ 428.052276][T15160] input: syz1 as /devices/virtual/input/input682 [ 428.098427][T15169] input input684: cannot allocate more than FF_MAX_EFFECTS effects [ 428.116251][T15171] input: syz1 as /devices/virtual/input/input683 [ 428.134188][T15173] input: syz1 as /devices/virtual/input/input685 [ 428.181394][T15173] input: syz1 as /devices/virtual/input/input686 23:08:37 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xd) 23:08:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x1ff, 0x7fff, 0xfbff, 0xa9}, 'syz0\x00', 0x32}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000140)={{r4}, 0x1, &(0x7f00000000c0)=[0x8001], 0xfffffbfe, 0x0, [0xa, 0x7d, 0x80000000, 0xffffffffffffffe0]}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:37 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x1) r4 = syz_open_dev$vcsu(&(0x7f0000000800)='/dev/vcsu#\x00', 0x8, 0x100) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x13) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x4, 0x9, 0x200, 0x5}, 0x4d, [0x8, 0x40, 0x47, 0x20, 0x7, 0x2, 0xcb7, 0xfff, 0x5, 0xe605, 0x5, 0xd2, 0x5, 0x101, 0x7, 0xfff, 0x2, 0x2, 0x401, 0x80000000, 0x10001, 0x7, 0x1, 0x800, 0xffffff62, 0x81, 0x8, 0x1, 0x1f, 0xa7, 0x1f, 0x1ff, 0x9, 0x4, 0xfcb, 0x9, 0x5, 0x0, 0x8, 0x51, 0x2, 0x2, 0x10000, 0xfffffff9, 0x10000, 0x0, 0x0, 0x6358, 0x8, 0x125f, 0x401, 0x5, 0x401, 0x6, 0x8, 0x4, 0x1, 0xbc0d, 0x3, 0x6, 0x7fffffff, 0x40, 0x100, 0x100], [0x7, 0xf3bf, 0x9, 0x3, 0x9, 0x7f, 0x40b, 0x6, 0x0, 0x5, 0x4, 0xb98b, 0x4, 0x8, 0x4, 0x1, 0xffffffff, 0x54b8, 0x2, 0x7b5, 0x3ff, 0x0, 0xfffffcf4, 0x1, 0x10000, 0x7, 0x7, 0x2, 0x1, 0x1ff, 0x0, 0x6, 0x3f, 0x3ff, 0xfffffffd, 0x0, 0x1, 0x80, 0xffff7fff, 0x2af, 0x0, 0x5, 0x5, 0x46, 0xffff, 0x1, 0xfb8, 0xbba, 0x4, 0x4, 0x200, 0x4, 0x5, 0x1, 0x5f2, 0xe, 0x81, 0x4, 0x0, 0x8, 0x10001, 0xfff, 0x0, 0x100], [0x1, 0x3ea2, 0x86, 0x200, 0x0, 0xdf, 0xffff8001, 0x6, 0x3f, 0x9, 0x7, 0x6, 0x76, 0x8e4, 0x200, 0x40, 0x4a, 0x5, 0xb13, 0x7, 0x9, 0x8, 0xfb, 0x3, 0x81, 0x6, 0x2, 0x7fff, 0x8, 0x7, 0x3, 0x0, 0x1, 0x6, 0x1, 0x0, 0x8000, 0x3, 0xee3, 0x9, 0xb6, 0x4, 0xf3e, 0x4, 0x2, 0x4, 0xa2bf, 0xffff, 0xffff, 0x3f, 0x71b, 0x4, 0x8, 0x5, 0x401, 0x5, 0x7fffffff, 0x2, 0xff, 0x3, 0x1, 0xff, 0x72f8, 0x12], [0x202, 0x4, 0x7, 0x8, 0x2, 0x3, 0x9, 0x6, 0x7, 0x0, 0x4, 0x79ea, 0x1, 0x8, 0x7, 0x1f, 0x7, 0xffffffff, 0x556, 0x2, 0x3, 0x200, 0xffffffd7, 0x80000000, 0x5, 0x10000000, 0x9, 0x0, 0xd36e, 0xffff, 0x5, 0x80000000, 0x81, 0x2, 0xfffffffa, 0x6, 0xff, 0x2, 0x1, 0x91b, 0x2, 0x7, 0x25, 0x6, 0xffff, 0x5, 0x0, 0x82, 0x2c3, 0x1f, 0x8, 0x4, 0x2, 0x10000, 0x6, 0x635636d8, 0x9, 0x0, 0x48a13f60, 0x1, 0x10001, 0x5, 0x3, 0x1]}, 0x45c) 23:08:37 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x800, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="0f91f240559c91474b8baaa35e0a0264b857206ab693d88e05b09fced8b4854b399b7f51a19e39b76dc80f6da0857dee533b6397bd07551893ccd048c90a189f9755201da5b12c950bef479f771aefedd1ab22ba0b8cd7ffaf58250cc78f1275a592050a27a3ce9e8b9d692819debc6143ccdfd1392200422635f5b7e6e2a0ddcd370458a72938646f2091b28d3abdfdd69c77c34462344e74ff2a8e5e786d2435afd28d91648ad32fdb747d6531364e391cf90c3971f209bbd379d3ad4141bd25838f945af61ce2a5e33c23deb98021ebfd2cb9ee9073d56c1d54d91695c4c19350eac94d854e490d888a25a21705bcd2", 0xf1}], 0x1, 0xad7d, 0xfb76) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 428.376929][T15196] input: syz1 as /devices/virtual/input/input688 [ 428.421407][T15201] input: syz1 as /devices/virtual/input/input690 [ 428.427909][ T35] audit: type=1326 audit(1609974517.180:75): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15191 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 428.472230][T15196] input: syz1 as /devices/virtual/input/input691 23:08:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x4, 0x9, 0x81b5}, 'syz0\x00', 0x44}) 23:08:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = dup(r0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0xffcb, 0xe11f, 0x6, 0x6}, 'syz1\x00', 0x19}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x8}, 'syz1\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x3) [ 428.533675][T15227] input: syz1 as /devices/virtual/input/input692 23:08:37 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xe) 23:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 428.681019][T15236] input: syz1 as /devices/virtual/input/input693 [ 428.706897][T15237] input: syz1 as /devices/virtual/input/input694 [ 428.740777][T15246] input: syz1 as /devices/virtual/input/input695 [ 428.768133][T15254] input: syz1 as /devices/virtual/input/input696 23:08:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x400000100002f, {0x1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/l2cap\x00') r5 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000000240)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) accept$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r6 = openat$cgroup_ro(r2, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) 23:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) write(r0, &(0x7f0000000080)="9a3828bab18ec90464bf4c02d49d065a02561b94d92e940f0edfa7bc5c680d99dc6813884d3f", 0x26) 23:08:37 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0xf) 23:08:37 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x0, 0x2}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 429.036525][T15274] input: syz1 as /devices/virtual/input/input701 [ 429.110410][T15284] input: syz1 as /devices/virtual/input/input702 23:08:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz1\x00', {0xfffb, 0x8, 0x27e, 0x476}, 0x3f, [0xcc78, 0x8, 0x83, 0x91, 0x1, 0xbb95, 0x2, 0x2, 0xfffffffb, 0x7, 0x8, 0x190c, 0x0, 0x1, 0x8, 0x2, 0xe, 0x100, 0x2, 0xfffff047, 0x100, 0x8, 0x8001, 0x10001, 0x3, 0x3e9, 0xc06, 0x9, 0x0, 0x1, 0x7, 0x20, 0x1, 0xffffffc1, 0x2, 0xff, 0x80, 0x1, 0xfffffffa, 0x6, 0x2, 0x80000000, 0x1, 0x0, 0x4, 0x4, 0x1, 0x3f, 0x7, 0x7, 0x7f, 0x6, 0x1, 0x6, 0x5, 0x8, 0x10000, 0x1000, 0x3f, 0x1, 0xfff, 0xfffffff9, 0x9, 0x3], [0x0, 0x4, 0xffffff1c, 0x7, 0x8, 0x600000, 0x0, 0x2, 0x5add, 0x0, 0x1, 0x0, 0x519, 0x1, 0x1, 0x3, 0x7, 0x1e1, 0x740b, 0x5, 0x2, 0x400, 0xfffffffc, 0x10000, 0x1ff, 0x80, 0x5, 0x0, 0x3f, 0x1, 0x4, 0x1f, 0x0, 0x3, 0x9, 0xffffffe1, 0x1, 0xf0, 0x4, 0x4, 0x5, 0x3a1a, 0xffffffff, 0x0, 0xff, 0x1, 0x4, 0x8c2, 0x4, 0x6, 0x5a49, 0x3, 0x7fff, 0x2, 0x7, 0x5, 0x9, 0x4, 0x40, 0x98, 0x5f64, 0x81, 0x6, 0x4], [0x9, 0x1, 0x8, 0xfbe, 0x7f, 0x7ff, 0x1, 0x7, 0x1f, 0xdb10, 0xffffffff, 0x8000, 0x2, 0x9, 0xef8, 0x3, 0x4, 0x1, 0x3, 0x10000, 0x7, 0x1e, 0x200, 0x0, 0x20, 0xffc, 0x4, 0x8, 0x1, 0x6, 0xffff9870, 0x20, 0x20, 0x906, 0x2, 0x2c3d, 0x8, 0xffffff01, 0x0, 0x8, 0xfffffff7, 0x3, 0x6, 0xa795, 0xffff, 0xb8e, 0x1ff, 0x7fff, 0xff, 0xfffffc01, 0x9, 0x3, 0x3, 0x8, 0x5, 0x20, 0xff, 0xfffffff8, 0x8, 0x1000000, 0x5, 0x1, 0x6, 0x66], [0x7fff, 0x8, 0x9, 0x4, 0x7fffffff, 0x8, 0xd1eb, 0x12b, 0x7, 0x152, 0xfffff32a, 0x800, 0x9, 0x4, 0x7fffffff, 0x2, 0x1, 0x4, 0x0, 0x6, 0x3ff, 0x0, 0x3ff, 0x4, 0x2, 0xe96, 0x6, 0x5, 0x1, 0x4, 0x2, 0x1, 0x7, 0xffff, 0x6, 0x5, 0xb009, 0x5, 0x5, 0x3f, 0x6, 0x1, 0x3, 0x100, 0x3f, 0x5, 0x400, 0x5, 0x200, 0x5, 0x2, 0xfffffff7, 0x8, 0x3, 0x8001, 0x8000, 0x8000, 0x7, 0x1, 0x8, 0x9, 0xeca, 0x45, 0x7f]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:38 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:38 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:38 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x10) 23:08:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x2}, 0x8}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x0, 0x400}, 'syz1\x00', 0x8000001e}) ioctl$UI_DEV_CREATE(r2, 0x5501) 23:08:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r4, 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 429.312711][T15298] input: syz1 as /devices/virtual/input/input703 [ 429.389311][T15307] input: syz1 as /devices/virtual/input/input704 [ 429.401248][T15313] input: syz1 as /devices/virtual/input/input705 [ 429.435449][T15303] input input706: cannot allocate more than FF_MAX_EFFECTS effects [ 429.461581][ T35] audit: type=1326 audit(1609974518.220:76): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15315 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = signalfd4(r0, &(0x7f0000000080)={[0xffffffff]}, 0x8, 0x80000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xf) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x7, 0x5, 0x2, 0x3, 0x1ff, 0x80000000, 0xffffeffe], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x2, 0x1ff, 0x101, 0x5}, 'syz1\x00', 0x31}) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x401, 0x570e, 0x9, 0x7f, 0x7, 0x9, 0x0, 0x7ed, 0x0, 0xfffffffd, 0x3ff, 0x2, 0x6, 0x2f0e}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 23:08:38 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x11) [ 429.651885][T15339] input: syz1 as /devices/virtual/input/input709 [ 429.689468][T15347] input: syz1 as /devices/virtual/input/input711 [ 429.696156][T15343] input: syz1 as /devices/virtual/input/input710 [ 429.719949][T15348] input: syz1 as /devices/virtual/input/input712 23:08:38 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0xffff}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xfffe}, 'syz1\x00', 0x8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) fcntl$dupfd(r3, 0x0, r4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 429.772421][T15363] input: syz1 as /devices/virtual/input/input714 23:08:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101080, 0x0) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz1\x00', {0x3, 0x2, 0x1, 0x475}, 0x17, [0x4, 0x28, 0x7, 0x1fc0000, 0x800, 0x6, 0xcf7, 0x2, 0x81, 0x9, 0x401, 0x9, 0x3, 0x8, 0x0, 0x1, 0xfffff2ae, 0x4, 0x2fa, 0x5, 0x7, 0x80000000, 0x40, 0x1ff, 0x0, 0x3, 0xc4, 0x1, 0x80, 0x6ac9, 0x0, 0x10001, 0x7fffffff, 0x1, 0x4, 0x2, 0x4, 0x7fff, 0xcd, 0x200, 0x6db, 0xffff8000, 0x200, 0xfff, 0x10001, 0x1, 0x6, 0x198, 0x1, 0x57, 0x9d, 0x64, 0x1, 0x3800, 0x2, 0x5, 0xfac1, 0x5, 0x7f, 0x4, 0x8, 0x3f, 0x3], [0x200, 0x800, 0x5, 0x1, 0x5, 0x8b, 0x8, 0x4, 0xc5, 0x1, 0x0, 0x1, 0x4, 0x18000, 0x1, 0xff, 0x2e, 0x8, 0x1, 0x3, 0xffffffff, 0x80, 0x0, 0x8, 0x8, 0x6, 0x3, 0x80000000, 0x1000, 0x7, 0x9, 0x9, 0x7f, 0x7, 0x733f, 0x4, 0x7fff, 0x20e5caf8, 0x9748, 0x5, 0x0, 0x80000001, 0xfd2, 0x2, 0x98d, 0x9, 0x6, 0x3dca, 0x7, 0xcba3, 0x1, 0x0, 0x2, 0x0, 0x9, 0x0, 0x9, 0x9, 0x9, 0x4, 0x7fffffff, 0xfff, 0x8, 0x7fffffff], [0x4, 0xc4, 0x9, 0x8000, 0x80, 0x6, 0x401, 0xd8, 0xfffffffb, 0x3, 0x1, 0x4, 0x7, 0xb9e, 0x7ff, 0x1000, 0x7, 0x66, 0x2, 0xffff, 0x98e, 0x6, 0x2, 0x3f, 0x4, 0x8, 0x8, 0xfff, 0x5, 0x7, 0xe86, 0x4, 0x5, 0x1000, 0x2, 0x0, 0x2, 0x100, 0x5, 0x7, 0x20, 0x9, 0x2, 0x80, 0x1, 0xffffffff, 0x8, 0x3, 0xcea, 0x80000001, 0x80000001, 0x800, 0x7, 0x5, 0xb58, 0xff, 0x3, 0x23e29283, 0x4, 0x4, 0x8, 0x5, 0x8], [0x200, 0x7, 0x5, 0x86, 0x200, 0x0, 0x7, 0x1ff, 0xbb, 0x1, 0x401, 0x4, 0x9, 0x7, 0x3, 0x7fffffff, 0x8, 0x7822, 0x10000, 0x7, 0x7, 0x3, 0x80, 0x1, 0x6a1, 0x5, 0x4, 0x9, 0x8, 0x5, 0x0, 0x3f, 0xf5, 0xac, 0x7fff, 0x9, 0x1, 0x7ff, 0x629, 0x4, 0x4, 0x5edf928d, 0x5, 0x45f, 0x5, 0x1, 0x40, 0x8, 0x9, 0x0, 0x5, 0x6, 0x6, 0x158a5823, 0x4, 0x8c4, 0x80000000, 0x6, 0x400, 0xf3f, 0x85, 0x9, 0x1f, 0x734f1533]}, 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001fd) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{0x22, 0x3f, 0x4, 0x8}, 'syz0\x00', 0x1b}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x80, 0xfffe}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x2001000}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 429.923707][T15378] input: syz1 as /devices/virtual/input/input715 [ 429.999500][T15387] input: syz1 as /devices/virtual/input/input718 [ 430.043419][T15390] input input719: cannot allocate more than FF_MAX_EFFECTS effects 23:08:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:39 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:39 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x12) 23:08:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB=',rootmode=0000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB='\x00'/10, @ANYRESDEC]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) tkill(0xffffffffffffffff, 0x1f) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(r0, &(0x7f0000000080)=0x3ff, r2, &(0x7f00000000c0)=0x2, 0x9, 0x2) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x8, 0x777, 0x656e, 0x8}, 0xe, [0x1, 0x0, 0x80000001, 0x3f, 0xf0a, 0xe0000000, 0x5, 0x3, 0x8, 0x0, 0x7f, 0xb5a4, 0x6, 0x9, 0x9, 0x200, 0x1, 0x0, 0xff0, 0x7, 0x9, 0x7f, 0x0, 0x4, 0x2, 0x1b81, 0xfffffbff, 0x9, 0x80000000, 0xff, 0x6, 0x0, 0x100, 0x3, 0x7, 0x2, 0xffff, 0x8, 0x200, 0x0, 0x3, 0x5, 0x80, 0x9, 0x9, 0xb2, 0x100, 0x9, 0x5, 0x3f, 0x101, 0x7fff, 0x0, 0x7198, 0x9, 0x0, 0x0, 0x7, 0x8, 0x1, 0x8d, 0x6777, 0x7, 0x9e], [0x0, 0x0, 0xc5380, 0x5, 0x5, 0xffff, 0x5, 0x3, 0x101, 0x9f0, 0x6, 0x8, 0x5, 0x748b, 0x3ff, 0x1c, 0x4, 0xadf3, 0x8, 0x7, 0x5e, 0x1, 0x40, 0x8, 0x1, 0x6, 0x8001, 0xcf9, 0x7c2, 0x7f, 0x3, 0x6, 0x9, 0x6, 0xfffffffc, 0x8000, 0x8, 0xfffffffd, 0x7, 0x1ff, 0x7, 0x401, 0x6, 0x0, 0x1, 0x8000, 0x10000, 0x7, 0x8, 0x6, 0x6, 0x401, 0x10000, 0xffffff3e, 0x6, 0x8001, 0x8, 0x4, 0x7ff, 0x1f, 0x0, 0x5, 0x3, 0xd46], [0x0, 0x1000, 0x5, 0x7, 0x9, 0x6, 0x7, 0x3, 0x1af3, 0xff, 0x80000000, 0x40, 0x7, 0x6, 0x6, 0x5, 0x8, 0x7f, 0x1000, 0x7fffffff, 0xaaf6, 0x7f, 0x7, 0xcc, 0x8000, 0x4, 0x200, 0x7, 0x0, 0x4, 0x81, 0x5, 0x9, 0x80000000, 0x2, 0x3, 0x6, 0x6, 0x4, 0x3, 0x5be09c7f, 0x3, 0x9, 0x20, 0x800, 0x0, 0x100, 0x2a8, 0x400, 0x4fd, 0x4, 0x4, 0x1ae, 0x800, 0x7fffffff, 0x7, 0x9, 0x9, 0x80, 0x8, 0x6, 0xfffffffd, 0xfffffff9, 0x3], [0xfc, 0x7ff, 0x4, 0x81, 0x7, 0x1, 0x431b, 0x3, 0x4421, 0x9, 0x1, 0xd5d, 0x4, 0x95f7, 0x7fff, 0x1, 0x40, 0xa0ff, 0x101, 0x1, 0x80000000, 0x9, 0x3ff, 0x100, 0x0, 0x8, 0x9, 0x0, 0xc982, 0x9, 0x1, 0xf3a6, 0x1, 0xe4, 0x4, 0xfd2a, 0x64b, 0x8, 0xb98, 0x6, 0x4b, 0x2, 0x9, 0x8, 0x6, 0x200, 0x777, 0x6, 0x5, 0x4c, 0x1, 0xfffffffe, 0x8, 0xffff9b95, 0x2, 0x5, 0x1, 0x80000000, 0x5c09, 0x3, 0x100, 0x6, 0x0, 0x9e8c]}, 0x45c) 23:08:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x4000, 0x0, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x6a, 0x803}, 'syz1\x00', 0x18}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 430.394173][T15405] input: syz1 as /devices/virtual/input/input721 [ 430.412657][T15404] input: syz1 as /devices/virtual/input/input722 [ 430.435965][T15410] input: syz1 as /devices/virtual/input/input723 [ 430.468330][ T35] audit: type=1326 audit(1609974519.220:77): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15408 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x7ff}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(r3) 23:08:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x25b6, 0x10000) dup3(r1, r0, 0x80000) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0xfffffffd}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) 23:08:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:39 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x13) [ 430.664369][T15440] input: syz1 as /devices/virtual/input/input726 [ 430.709306][T15441] input input727: cannot allocate more than FF_MAX_EFFECTS effects [ 430.717120][T15448] input: syz1 as /devices/virtual/input/input729 [ 430.726415][T15440] input: syz1 as /devices/virtual/input/input728 [ 430.738284][T15451] input input730: cannot allocate more than FF_MAX_EFFECTS effects 23:08:39 executing program 1: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x100, 0x6, 0x3, 0x8}, 0x1e, [0x6, 0x75, 0x897, 0x1, 0x9, 0x20, 0x0, 0x1, 0x8, 0x1, 0x15, 0x0, 0x1, 0x6b7b601f, 0x1, 0x10001, 0x1, 0x20, 0x5, 0x8, 0x5, 0x3ff, 0xaf, 0x101, 0x6, 0x8, 0x4, 0x401, 0x0, 0x7fff, 0x80000000, 0x40, 0x6, 0x0, 0x7fff, 0x8, 0x9, 0x5, 0x7f, 0xfffffbff, 0x0, 0x100, 0x2, 0x7ff, 0xb0, 0x8, 0x6, 0xa34a, 0x677, 0x9, 0x4, 0x7, 0x2, 0x80000000, 0x7, 0x3, 0xfffffff8, 0x8, 0x10000, 0x7ff, 0x513, 0xb02, 0x5, 0x7fff], [0x8, 0x6, 0x800, 0x36, 0x0, 0x5, 0x6, 0x1ff, 0xe910, 0x9, 0x7fff, 0x4, 0x4, 0x4, 0x7, 0x100, 0x4, 0x1000, 0x2, 0x1f, 0x7974, 0x7, 0x2, 0x3, 0x2, 0x8001, 0x4, 0x1ff, 0x5, 0x9, 0x6, 0x6760, 0x2, 0x7fff, 0x2, 0x8, 0x6d, 0x6, 0x7, 0x200, 0x6, 0x6, 0x1, 0xfffff262, 0x3ff, 0x101, 0x38, 0x83f9, 0x7, 0x8, 0x3, 0x4, 0x10000, 0x9d, 0x3, 0x2020, 0x1, 0x3, 0x8, 0x0, 0x4, 0x9, 0x80000000, 0xffffff7f], [0x800, 0x7, 0x83, 0xfffffe00, 0x6, 0x400, 0x2, 0x8000, 0x0, 0x6a9e, 0x4, 0x6, 0xffff0001, 0x1000000, 0x7, 0xfff, 0x0, 0x7, 0x18, 0x6, 0x7, 0x7, 0x401, 0x9, 0x9, 0x4, 0x7f, 0x7, 0x8, 0x8, 0x401, 0xfff, 0x0, 0x2, 0x40, 0x200, 0x5, 0x1, 0x8001, 0x80000000, 0x2, 0x8001, 0xd4e, 0x8001, 0x8000, 0x80000000, 0x9, 0x3, 0x1, 0x9, 0x7, 0x9f, 0x2, 0x4, 0x5, 0x0, 0x8, 0x2, 0x3, 0x6b84, 0x6, 0x1, 0x8, 0xa5], [0x1, 0x3, 0x7ff, 0x6, 0xffff, 0x3ff, 0x8, 0xffff, 0x6c8, 0xfff, 0x5, 0xff, 0xf9ae, 0x5bfb, 0x2, 0x3e, 0x1, 0x6, 0x3, 0x2, 0x3, 0x7, 0x0, 0x5, 0x8, 0xffffffff, 0xaa5f, 0x0, 0x5a1, 0x4, 0xadd9, 0xa496, 0x2, 0x2, 0x3154, 0x800, 0x242b, 0x7, 0x3, 0x5, 0x1, 0x7, 0x80, 0x8, 0x4, 0x80000000, 0x87f0, 0x3ff, 0x7, 0x4, 0x7, 0x10000, 0x9, 0x6, 0x2, 0x307, 0xc8, 0xe23b, 0x40, 0x9, 0x0, 0x5, 0x6, 0x80]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xfff7, 0x1da4, 0x6, 0xe7d}, 0x1f, [0x8, 0x100, 0x0, 0x3ff, 0x800, 0x20, 0x1, 0xd46f, 0xe6, 0xffff, 0x0, 0x3, 0x7, 0x7ff, 0x40, 0xe3f0, 0x10001, 0x1, 0x80000000, 0x9a, 0x9, 0x8, 0x8001, 0x4, 0x5, 0x100, 0x7fffffff, 0x5, 0x200, 0x9, 0xfffc, 0x5, 0x2, 0x73b, 0x7e6, 0x20, 0x9, 0x7, 0x5, 0x8001, 0x3, 0x9, 0x1, 0x3, 0x7, 0x621e, 0xf1, 0x7, 0xfffffffd, 0x1f, 0x7, 0x1f, 0x8, 0x8, 0x80000001, 0x80000000, 0x1, 0x4, 0x20, 0xfffffffa, 0xfffffffe, 0xffffffff, 0x1c000000, 0xbb2c], [0xd80c, 0x1000, 0x7ff, 0xfffff801, 0x1ff, 0x7fffffff, 0x800, 0x4, 0xae3d, 0x7, 0x7ff, 0x3, 0x2, 0x3, 0x0, 0x9, 0xd03, 0xb8, 0x0, 0x7, 0x1c0, 0xffff0001, 0x5, 0x1, 0x6, 0x2, 0x7, 0x7ff, 0x1, 0x7, 0xfffffe00, 0x1, 0x6, 0x922, 0x8, 0x3f, 0x7ff, 0x2, 0x3, 0x3, 0x1c, 0x2, 0x3, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x5, 0xf03, 0xd7, 0x0, 0x8, 0x3, 0x3, 0x3fd, 0x3f, 0x32, 0x8, 0x1, 0x200, 0x4, 0x3ff, 0xffffff00], [0x5, 0x10001, 0x7, 0x2, 0x4, 0xaf7, 0x8, 0xc5, 0x6, 0x3f, 0x774e, 0x2dec, 0x0, 0x43e, 0xff, 0x4, 0x9, 0x0, 0x9, 0x6, 0x7, 0x5, 0x6, 0x7, 0x81, 0xffff7fff, 0x1000, 0x0, 0x9, 0x7fffffff, 0x0, 0x2, 0x8, 0x9, 0x7fff, 0x80000001, 0x55, 0x4, 0x5, 0x7, 0x7, 0xeb, 0x8, 0x81, 0x2, 0x4d, 0x200, 0x20, 0x2, 0x56, 0x4, 0xfffffe00, 0x1000, 0xfffffff8, 0x3, 0x5, 0x9, 0xf4, 0x9, 0x20, 0x3, 0x1, 0x2, 0x8], [0xf455, 0x8, 0x58, 0x2, 0xfffffffc, 0x1000, 0x9, 0x5, 0x6, 0x6ab0, 0x8, 0x1, 0x6, 0x401, 0x0, 0xfffffff8, 0xfffffff9, 0xe79, 0x3, 0x1, 0x0, 0x7, 0x5, 0x8, 0x7fff, 0x81, 0x2, 0x80000001, 0xff, 0x7062, 0x79c5, 0x1, 0x2000001, 0x6, 0x8, 0x10000, 0x40, 0x1, 0x1, 0x6ea, 0x2, 0x9, 0x0, 0x0, 0x10001, 0x101, 0xffffffff, 0xb1e0, 0x4, 0x1ff, 0x1, 0x9, 0xfff, 0x0, 0x2, 0x600d, 0x0, 0x1f, 0x21e, 0x1, 0x4, 0x81, 0x9, 0x3]}, 0x45c) 23:08:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 430.798609][T15458] input: syz1 as /devices/virtual/input/input731 [ 431.007574][T15477] input: syz1 as /devices/virtual/input/input733 [ 431.046907][T15483] input: syz1 as /devices/virtual/input/input735 23:08:40 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:40 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x610080) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xe) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000000c0)}, {&(0x7f0000000140)=""/193, 0xc1}], 0x3) 23:08:40 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x14) 23:08:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000080)="97f1466385b3424f6eaf007812c954bf3791070fb7793281c3360ea3049da459860c695f5a80e00c38ef042367a787851673e7975c67aad4f8bb9905c2879e4893c6a9aacd", 0x45}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000140)="461a4ec9867dd55df3ff840efbbd92044ea1d3e81f18a8c09a62cdd8e27cd0e446c2d5a5b704e9e7655f5e37787c90f43c95023319050ef75762b4b7080329780c8e595b7c7c607eda6a39593f8104e4f129f3b063730f0d5d88e185f44f1c551838468f59741a920057196f9a1c58567540608c", 0x74}, {&(0x7f00000001c0)="eda9a0b29e70ec529191d6c830f4d24f0106e9c009ecdd87ab81442cb60e58682c60f4938baa994effdee9d6759e672893cb5a6b5c1f4bd1fc0ef2b9ed79eae98a69bb05020c643501401fa580b6fc72f7dd0e6937fb09957f5fd03f35241a3f162a962b80d182e39f48899b9819", 0x6e}, {&(0x7f0000000240)="b8b93cf145ada28b8b613e6154554ca31b89045b4faec44f136546df542ea51d0ccf521fa104964f39b4e32d2d5507ef4c11fe27737f7fdb73aac980cb3ad4110517ff4ec122e8f6ed4525fa40efa4c245edcc13d47ecb7997bfe4190d29ef04e0e8b5e2dc561f8bde3af3c6439e686e4d9fc83421587c0473b87f83c7c0189fdb3c3690837be7d6641791d386112e5bab725d397a1cdbf93584dfc446970f1e8ce159f6a7829cfe679508bc7d45cf64a05512515945fbc1676c3de4f499f2245f", 0xc1}, {&(0x7f0000001380)="59b6f0bef7f29ce80eeb238b499b4efa94d5e1380a33f6ed98e3e6744f84d8fbca212c22f5d7bfdc814cb8e723a5ab34a257a214c944982285b889dafc5fcaa58e0a5b500e3957adfe0988476bed5ad0fbadf55822a710a129508214", 0x5c}], 0x6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000001480)='syz0\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) [ 431.363991][T15496] input: syz1 as /devices/virtual/input/input736 [ 431.377944][T15500] input: syz1 as /devices/virtual/input/input737 [ 431.421888][T15499] input: syz1 as /devices/virtual/input/input738 [ 431.452719][ T35] audit: type=1326 audit(1609974520.210:78): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15502 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 431.533122][T15521] input: syz1 as /devices/virtual/input/input740 23:08:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x1, 0xfff, 0x5, 0x7ff}, 'syz1\x00', 0x31}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000001c0)=0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x80000004, 0x7, r1, 0x0, &(0x7f0000000080)={0x9b0903, 0x202, [], @value=0xfffe}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x400900, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 431.614197][T15534] input: syz1 as /devices/virtual/input/input741 23:08:40 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x15) [ 431.661379][T15539] input: syz1 as /devices/virtual/input/input742 23:08:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x41) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, r0) ioctl$UI_DEV_DESTROY(r4, 0x5502) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:08:40 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x16) [ 432.165990][T15577] input: syz1 as /devices/virtual/input/input749 23:08:41 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:08:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vmci\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$uinput_user_dev(r3, &(0x7f0000000540)={'syz1\x00', {0x0, 0x31a, 0x1, 0xca0}, 0x27, [0x7fff, 0x1, 0xfff, 0xa8a2, 0x0, 0xffff, 0x401, 0x9eb, 0x7, 0x2, 0x2, 0x4, 0x80, 0x5, 0xa9, 0x2, 0x7fff, 0x5, 0x1, 0x0, 0x6, 0x9, 0x7, 0x800, 0x4, 0x3, 0x100, 0x2a, 0x8001, 0x7, 0x1, 0x101, 0x0, 0x9, 0x1, 0x8, 0x1, 0x0, 0xfffffff9, 0x5, 0x587556ef, 0x97, 0x1, 0x800, 0x9, 0x4, 0x2, 0x94f9, 0x24, 0x7, 0x6, 0x1f, 0x1, 0x2, 0x7, 0x3f, 0x6, 0xad38, 0x3, 0x76, 0x40, 0x0, 0xf0000000, 0x8], [0x9, 0x0, 0x0, 0x0, 0x9, 0x3, 0x5, 0x4, 0x100, 0x7, 0x5, 0x2, 0x4, 0x3, 0x2, 0x9, 0x9aaf, 0xfffffffe, 0x7fffffff, 0xfff, 0x80, 0x1f, 0x26, 0x800, 0x1, 0x2, 0xdf, 0x3f, 0x10001, 0x1000, 0x1900, 0xcc, 0x5, 0xfff, 0x10000, 0x7, 0x7, 0x6, 0x2, 0x8, 0x6, 0x9, 0xffffffff, 0xa62, 0x1, 0x46, 0x8, 0x1, 0x7, 0x9, 0x5, 0xf9d2, 0x6, 0x12, 0x80, 0x100, 0x9c, 0xfffffff7, 0x3, 0x6, 0x9, 0x7fff, 0x6, 0x1f], [0x7fffffff, 0x7, 0x5f, 0x0, 0x200, 0x1000, 0x3, 0x98, 0x5, 0x8, 0x20800000, 0x2e2d, 0x1, 0x90d1, 0x1000, 0x1, 0x7, 0x6, 0x1, 0x4, 0x1, 0x8c8c, 0x8, 0xd4, 0x7fffffff, 0x5, 0x5, 0x23ab, 0x0, 0x1, 0x4, 0x7, 0xff, 0x1, 0x80, 0x7ff, 0x100, 0x9, 0x800, 0xc062, 0x8, 0xb6da, 0x7fff, 0x4, 0x3, 0xbd3, 0x4, 0x7fffffff, 0x80000001, 0x11f, 0xffff, 0xf8000000, 0x6, 0x0, 0x1ff, 0x8, 0x40, 0x0, 0x8c3d, 0x101, 0x3, 0x8, 0x7fff, 0x2], [0x5, 0x0, 0x7fffffff, 0x1f, 0x0, 0x81, 0x2, 0x2, 0x3ff, 0x0, 0x7fff, 0x2, 0x10000, 0x0, 0x6f, 0x200, 0x1, 0x5, 0x4, 0xec, 0x8001, 0x10001, 0xffffffff, 0x1ff, 0x80000000, 0x1, 0x7, 0x5, 0x0, 0x400, 0xfffffffd, 0x1, 0x3, 0x0, 0x5, 0x8, 0x10001, 0x8, 0x3, 0x81, 0x1, 0x1, 0xfb5, 0x0, 0xabdd, 0x3f, 0xb6c, 0x10, 0x0, 0xffffffff, 0xff, 0x9, 0x7, 0x4697, 0xfffffff9, 0x6, 0x4, 0x71d, 0x6, 0xd6e8, 0xea1, 0x2, 0xfffffffd, 0xf34]}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) r4 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$packet(0x11, 0x3, 0x300) ftruncate(r4, 0x0) dup3(r7, r4, 0x0) fadvise64(r1, 0x1000, 0xfffffffffffffffb, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:41 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:41 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x17) 23:08:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 23:08:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x4, 0x8, 0x3ff, 0xaf}, 0x26, [0x6, 0x5, 0x3, 0x5, 0xea6, 0x2, 0x7fffffff, 0x8, 0x7, 0x2, 0x4, 0x8, 0x80, 0x8, 0x81, 0x3, 0x6, 0x6, 0x3, 0x7ab, 0x0, 0x0, 0x2, 0xc9, 0xff, 0x4f8d1145, 0x2, 0x7409, 0x8, 0x1ff, 0x8, 0xffffffdd, 0x7ec, 0x5, 0x9, 0x80000001, 0x5, 0x2, 0x8, 0x8000, 0x1f, 0x2, 0x7f, 0x2, 0x5, 0xf710, 0x1f, 0x1, 0x9, 0x1, 0x9f, 0x7, 0x0, 0x2, 0x1, 0x0, 0x401, 0x80, 0x6, 0x1f, 0x5, 0x5503, 0xcef], [0x9, 0x467f362e, 0x8, 0x24a4, 0x3, 0x3, 0x20, 0x0, 0x0, 0x4, 0x7, 0x4, 0x81, 0x81, 0xff, 0x0, 0x0, 0x10000, 0x100, 0x5, 0x78, 0x3f, 0x8, 0x0, 0x6, 0x6, 0x7, 0x20, 0x5, 0xffffffff, 0x4, 0xbe70, 0x7, 0x3, 0x2, 0x20, 0xffff7fff, 0x5, 0x4, 0x0, 0xfffffc00, 0x6, 0x80000000, 0x7, 0x7f, 0x2, 0x1, 0x3e, 0x6, 0x3, 0x7, 0x1a0, 0x3f, 0x3, 0x28f, 0x8, 0x7, 0x8, 0xffffffff, 0x3, 0x81, 0x1, 0x4], [0x8, 0x3, 0x4, 0x6, 0x7fff, 0x7ff, 0x815a, 0x6, 0x9, 0x5, 0x3ff, 0x2, 0x8, 0x401, 0x4, 0x40, 0x2, 0x7, 0x4, 0x9, 0x1, 0x8, 0x7, 0x3, 0x8, 0xfffffffb, 0x80, 0x9, 0x7fff, 0x7fffffff, 0x5, 0x3, 0x0, 0x6, 0x75, 0x5, 0x8, 0x3c2, 0x4, 0x5, 0x2, 0x6, 0x7, 0x80000001, 0x73dcc94b, 0x2, 0x5d86, 0x9, 0x2, 0x0, 0x2, 0x80, 0x3, 0x4, 0x0, 0x2, 0x9, 0x80000001, 0x8, 0x1fc, 0x81, 0x0, 0xb0f3], [0x7, 0xffffffff, 0x1, 0x20000000, 0xfff, 0x7fff, 0x8001, 0x401, 0x1, 0xaf, 0x7cd, 0x0, 0x9, 0xe13, 0x100, 0x3, 0x7ff, 0xb97, 0x23, 0x7, 0x7, 0x7, 0x5, 0x7ff, 0x7, 0x9, 0x37, 0x4, 0x9, 0xffffb2af, 0x7, 0x7, 0x1, 0x9, 0x6, 0x8, 0x1, 0x1, 0x2, 0x1, 0x1ff, 0x1, 0x5, 0x7, 0x2, 0x100, 0xffff, 0x7fff, 0x1, 0x1ed6d1ee, 0x0, 0x20, 0x9, 0x1f, 0x0, 0xfffff5a8, 0xffffffff, 0x2, 0x4, 0x1b5, 0x1ff, 0x2, 0xd2, 0x6]}, 0x45c) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 432.362575][T15591] input: syz1 as /devices/virtual/input/input750 [ 432.392218][T15597] input: syz1 as /devices/virtual/input/input752 [ 432.411082][T15594] input: syz1 as /devices/virtual/input/input753 [ 432.457892][T15611] input: syz1 as /devices/virtual/input/input756 23:08:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x121) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r4, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r5, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x5c78c1a3, 0x1000, 0x6, 0x7fff, 0x8, "2afa6ea795dd4100"}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 432.533803][ T35] audit: type=1326 audit(1609974521.290:79): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15599 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:41 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x18) 23:08:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x101, 0x9, 0x6, 0x7}, 'syz1\x00', 0x56}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@private2}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xd, 0x8, 0x1000003}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r5 = openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x1000, 0x1f}, 'syz0\x00', 0xffffffff}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x4d) move_mount(r2, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x14) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r7, 0x5501) 23:08:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x1, 0x7, 0x1000}, 'syz0\x00', 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 432.759544][T15639] input: syz1 as /devices/virtual/input/input763 23:08:41 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x19) [ 433.052801][T15662] input: syz0 as /devices/virtual/input/input766 [ 433.070915][T15667] input: syz0 as /devices/virtual/input/input767 23:08:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0xaf, 0x8}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x926e}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x13) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) [ 433.231683][T15675] input: syz1 as /devices/virtual/input/input768 23:08:44 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x1a) 23:08:44 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 23:08:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x23, 0x4, 0x101, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f00000001c0)="2c0078ba0faee34962628912f44390d99a81bfaf0db1f201a47119a52f8661ea64c603dff8a7b4b726291ed9737de4b1de78e6b2c93e4ddfeb035010fd3683e37e7dd6082385222fc0f8e18737af8393b5f3c326fc1bf0412b839c679dee3668c78abc09", 0x64, 0xc044, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000380)={0xa, 0xe22, 0x20002, @empty, 0x1}, 0x1c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="0b1b2631fa0f808df6dd88c4f1f4c8b747fc8975b4eedcf1fb35b00dfc314e4754f733d32bcda66da9b08934805d6fbf99374dd2ad127f7d20e8067991a29a", @ANYRES32], 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) syz_emit_ethernet(0xf2, &(0x7f0000000240)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0x3, 0xe4, "bb00787952d3c1eab2f4c739f975e42fb510a6a00ff9fed7d76b1207e1cdaa4fa2ee2e64db4d41c960a5ce4a6db8be1ca81362a6a973f9e3d4bcd17bf221df4f36880070fffe72f8a5e2e828a7e1af73d276140920f86bb9d92ae73156ac517239ad2996ae683729bafd8aa2b6e82621b168368398bcb17b4e3905283011b2c871fdb0d96fe83a5c639bc8a174a2e834cd21c9c4ae0cf1e21aea12231958f45bb3816ddf5b7b7dbe15ebf463d4b5612b9fe88d92bc4e1ff813ce17e8fac64d587451545364d1f0f636ee15e8ae488acb9adf87798e9005239be47eadd55ca0fe3c"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x152, 0x4ba, 0xacd, 0xeb4]}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xf9, &(0x7f00000004c0)={@empty, @dev={[], 0x12}, @val={@val={0x9100, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@generic={0x88b5, "2f6df48a15364b70b4bb8814565d8177bca743f28a5016cf790a85297def6d3c88f61568a79b645e4b43d005a1a361efdcd0ac0e106e7bf40f2da3fdb3d9b30ac0325fe0ffed97634472564d387b640b9890424ae3773dd1864bfc99d83f330a3e90a23250d44107342599cc2cc560d4bd65a9a84e89e6abd29302418b4f6424339dcb2dfd3574b40ce885970d1c2bdd35e8d9fd7edc5c1f2ac5a103f9456206672254f85e35d7a6bb6f94d2006ea0460ef98ef1c476b7f86dea19cba4742bfd9d296ccc61804952518165d7b6458be6530ae80c973b1b89b45331c53181b85f1e69eb"}}}, &(0x7f0000000480)={0x0, 0x4, [0x6d3, 0x70c, 0xef, 0xc09]}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) 23:08:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @empty, @broadcast}, 0xc) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x8, 0x0, 0xfffe, 0x2}, 'syz1\x00', 0xc}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40000000000056) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x2, 0x476}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10000, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) readahead(r0, 0xf4, 0x4) [ 435.608494][T15709] input: syz1 as /devices/virtual/input/input772 23:08:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x81, 0x5, 0xe4a, 0xe6a, 0xd}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 435.697064][T15709] input: syz1 as /devices/virtual/input/input775 23:08:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xb) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x81, 0x30, 0x40, 0x4}, &(0x7f00000000c0)=0x18) [ 435.732782][ T35] audit: type=1326 audit(1609974524.490:80): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15712 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:44 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x1b) 23:08:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x2, 0x80000}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x3}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x800, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 435.814131][T15735] input: syz1 as /devices/virtual/input/input776 [ 435.875009][T15735] input: syz1 as /devices/virtual/input/input777 [ 435.948778][T15748] input: syz1 as /devices/virtual/input/input778 23:08:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84400) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x100, 0x0, 0x0, 0x80000001}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x4, 0x1000, 0x2, 0x1}, 'syz1\x00', 0xfffffffc}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) dup(r1) [ 436.067487][T15757] input: syz1 as /devices/virtual/input/input779 23:08:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x19bf, 0x7, 0x9, 0x6}, 'syz0\x00', 0x50}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 436.113545][T15764] input: syz1 as /devices/virtual/input/input781 [ 436.139064][T15770] input input783: cannot allocate more than FF_MAX_EFFECTS effects [ 436.196592][T15770] input input784: cannot allocate more than FF_MAX_EFFECTS effects [ 436.243617][T15777] input: syz1 as /devices/virtual/input/input785 23:08:47 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:47 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x1c) 23:08:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x7f, 0x7ff, 0x0, 0x5}, 0x35, [0x80e, 0x2, 0x1, 0x10001, 0x7fffffff, 0x2, 0x8, 0xfffffff9, 0x20, 0x5, 0xd5, 0xfffffffd, 0x8, 0x10000, 0x9, 0x4, 0x3, 0xad, 0x800, 0x7, 0x5, 0x9, 0x7, 0x0, 0x3, 0x51d, 0x7, 0x800, 0x5, 0xf85, 0xf5bc, 0x5, 0x1f, 0x2, 0x4, 0xf36, 0xffffffff, 0x81, 0x5, 0x728f, 0x101, 0x7, 0x5, 0x3, 0x8001, 0xffffff43, 0x0, 0x7, 0xd94, 0xf8a, 0x8, 0x1ff, 0x7, 0x40, 0x3a3, 0x8, 0x9, 0x1f, 0x10001, 0xff, 0x1ff, 0x0, 0x3, 0x200], [0x3, 0x7, 0x3, 0x1, 0x1f, 0x3f, 0x6, 0x7, 0x9, 0x3, 0xffffffff, 0x696, 0x7, 0x62d7, 0xffffffff, 0x0, 0x2, 0x44, 0x1, 0x1fe, 0x8d48, 0x7fffffff, 0x4, 0x5, 0x49c, 0x8, 0xfb3, 0x7fffffff, 0x412, 0x7fffffff, 0x3, 0x5, 0xec, 0x3ff, 0x9, 0x2, 0xb22d, 0x179, 0x2, 0x8, 0x7, 0x0, 0x2, 0x1, 0x401, 0x3, 0x2, 0xfff, 0x2f7, 0xfde4, 0x9, 0x8, 0x0, 0x9, 0x3, 0x7fffffff, 0xb53a, 0x7, 0x3387a4bd, 0x1ff, 0xffffffff, 0x0, 0x4, 0x5], [0x3ffc00, 0x3, 0xfffff506, 0xffffffff, 0x2, 0x6, 0x7f, 0x7, 0x876, 0x7, 0xfffffffe, 0xfffffffe, 0x5, 0x8, 0x4, 0x1, 0x6, 0x7, 0x7, 0xc5, 0x1, 0x0, 0x1, 0x3, 0x400, 0x8, 0x3c2d, 0x7, 0x2, 0x9, 0x723f, 0x101, 0x4, 0xd98, 0x39, 0x6, 0x3, 0x1, 0x218, 0x9, 0x97f, 0x7, 0x0, 0xb73, 0x100, 0x1, 0x12fa5830, 0x0, 0xe, 0x40, 0x2, 0x5, 0x7f, 0x87, 0x20, 0x6, 0x0, 0x401, 0x4, 0x4, 0x8, 0x200, 0x401, 0x1], [0x6, 0x9, 0x101, 0x3, 0x80, 0xfffffffb, 0x8, 0x9, 0x5, 0x2, 0x908, 0xa24, 0x401, 0x400, 0x7, 0x3, 0x7, 0x4, 0x6, 0x4a, 0x1, 0x2, 0x200, 0x2, 0x80000000, 0x40, 0x4, 0x9, 0x8, 0x1, 0xe7, 0x3, 0xffffffff, 0x5, 0xff, 0x6, 0x80, 0x1000, 0x3, 0x7, 0x4a, 0x6b4, 0x6, 0x401, 0x6, 0x1a3c, 0x9, 0x3, 0x9, 0x1, 0x800, 0x0, 0x5, 0xf3e, 0x0, 0x7, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x5, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0xffff, 0x565b, 0x6, 0x6}, 'syz1\x00', 0x39}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x2, 0x0, 0x7}, 'syz0\x00', 0x7}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000242500000000000000008500c1000000004be500000004000000181b00"/44, @ANYRES32=0x1, @ANYBLOB="003794cc7c988409199e3200", @ANYRES32=0x1, @ANYBLOB="00000000008a7e515120"], &(0x7f0000000600)='GPL\x00', 0xa08a, 0xdd, &(0x7f00000001c0)=""/221, 0x40f00, 0x6, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x7, 0xc}, 0x10}, 0x78) r3 = syz_open_dev$usbfs(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x40, 0x80000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000580)={{0x6, 0x3e, 0x2, 0x99}, 'syz1\x00', 0x1d}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000080)={0x8, {0x1ff, 0x1, 0x2, 0x20, 0x9, 0x7f}}) 23:08:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:47 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 438.691147][T15798] input: syz1 as /devices/virtual/input/input787 [ 438.700711][T15799] input: syz1 as /devices/virtual/input/input788 [ 438.700859][T15802] input: syz1 as /devices/virtual/input/input789 [ 438.738651][T15812] input: syz1 as /devices/virtual/input/input790 [ 438.817521][T15815] input: syz1 as /devices/virtual/input/input791 [ 438.842552][ T35] audit: type=1326 audit(1609974527.600:81): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15805 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008004) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:47 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x1d) 23:08:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x400000, 0x0, 0x8, 0x2}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x1, 0x0, 0x1}, 'syz1\x00', 0x15}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 23:08:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="73797a746e6c30000000000000000000f0b60735b7ae26a8be7ea983029d00a1d19d7cdf194e71e23b7136b03074f85403a3c5301ef88b661a5ff3d9fc3dbf5d30ea9d359ba8649cd3d125eb159410e2835f5433f6fe732b1a625fe37037f91298c5af7a736f4038da03b365dcfd8df7317102b3bf5f86472a2c42d385df9b8733cdc3f0e9bf2069f5c65a61aaaf1b08944a", @ANYRES32=0x0, @ANYBLOB="0001000800000009000000044d3b00340065000000299078ac14142f0a01010283078a6401010089173e64010100ac1414bbac1414bbac1414aa000000000000"]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000}, 0x869b) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@remote, @in=@private=0xa010101, 0x4e21, 0x800, 0x4e20, 0xe232, 0x2, 0x20, 0x0, 0x2e, r3, r7}, {0x7, 0x1ff, 0x62d, 0x1f, 0x80000001, 0x0, 0x8, 0x1}, {0x7, 0x2, 0x4, 0x20}, 0xc5, 0x6e6bbc, 0x0, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d4, 0x33}, 0x0, @in6=@mcast1, 0x3506, 0x1, 0x1, 0x7, 0x7, 0x8001}}, 0xe8) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x8, 0x1, 0x4}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 439.010709][T15843] input: syz1 as /devices/virtual/input/input793 [ 439.071920][T15853] input: syz1 as /devices/virtual/input/input795 23:08:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1000, 0x2, 0x4d, 0x7}, 'syz0\x00', 0xc}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {0x4, 0x0, 0x20, 0x5}, 0x28, [0x4, 0x2, 0x4, 0x80000001, 0x40, 0x4, 0x10001, 0x7, 0x1, 0x1, 0xffffffff, 0x3ff, 0xa000, 0x0, 0xffffffc1, 0x1400000, 0xb2, 0x1, 0x55847d65, 0x1, 0x2, 0xfe, 0x1, 0x5, 0xffff, 0x9, 0x2800, 0x5a0, 0x478e, 0x200, 0x0, 0xffffffff, 0x0, 0x3ff, 0x6, 0x7, 0x1, 0x4, 0x0, 0x58c, 0x3, 0x4, 0x9, 0x9, 0x6, 0xffffffb3, 0xd59, 0x8, 0x81, 0x6, 0x1ff, 0x2, 0x7, 0xf0d8, 0x8000, 0x2, 0x800, 0x7, 0x301f, 0x9, 0x4, 0x0, 0x6, 0x1], [0x1, 0x6, 0xffffff7f, 0x7fffffff, 0x9, 0x1, 0x5, 0x6, 0x1, 0x7, 0x7, 0x8, 0x7f, 0x2, 0x429, 0x1000, 0x7, 0x4, 0x0, 0xfffff001, 0x80000001, 0x1, 0x2, 0x2, 0x6, 0x8, 0x800, 0x8, 0x3ff, 0x4d2, 0x9, 0x4, 0x2, 0xd27, 0x4, 0x8, 0x2, 0x8001, 0x200, 0x4f, 0x10001, 0x1000, 0x1, 0xad6, 0x81, 0x6dbd, 0x9, 0x40, 0xfffffffb, 0x1000, 0x8, 0xa37c, 0x8, 0xffff8000, 0x1, 0x3f, 0x4, 0x1ff, 0x7fff, 0x1, 0x7f, 0x37620769, 0x401, 0x2], [0x400, 0x7, 0x4, 0x1, 0x8, 0x4, 0x100, 0x90, 0x20, 0x81, 0x0, 0x0, 0x3f, 0x4, 0x2, 0x80000000, 0xef, 0x8d47, 0x8127, 0x100, 0x81, 0x81, 0x7fff, 0xfffffc01, 0x7, 0x536b, 0x101d, 0x5, 0x101, 0x2, 0x80000000, 0x1, 0x2, 0x6ed4ff49, 0x5, 0x5, 0x4, 0x2, 0x7fffffff, 0x3ff, 0xc5, 0xffffffff, 0x1, 0x8, 0xfffffa0c, 0xffff, 0x0, 0x620142db, 0x9, 0x0, 0x9, 0x80, 0x4000000, 0x20, 0x0, 0x800, 0x600, 0x7ae, 0x8ea, 0x6, 0x9, 0xcb, 0xfff, 0x1], [0x13, 0x80000001, 0x2, 0x5, 0x40, 0x9, 0x5, 0x0, 0x37c, 0x11d, 0x6, 0x10c8a7aa, 0x1, 0x7f, 0x101, 0x1, 0x9, 0xeb02, 0x7, 0x7fff, 0x8b2, 0xac54f2ed, 0x8, 0x4, 0x4b2c3161, 0xef, 0x1ff, 0xfffffc01, 0x7, 0x3, 0x80000001, 0x101, 0x5b, 0x0, 0x71f7, 0xffffff7c, 0x4, 0x1, 0x5, 0x3, 0x372, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x2, 0x2, 0x3, 0x8, 0x4, 0x4, 0xf87d, 0x101, 0x101, 0x3, 0x0, 0x8000, 0x5, 0x8, 0x800, 0x80000001, 0x0, 0x7ff, 0x8001]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x10000, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 439.216097][T15863] input: syz1 as /devices/virtual/input/input798 [ 439.285921][T15874] input: syz1 as /devices/virtual/input/input799 [ 439.314918][T15877] input: syz1 as /devices/virtual/input/input800 [ 439.358261][T15886] input: syz1 as /devices/virtual/input/input802 23:08:50 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:50 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x1e) 23:08:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = syz_io_uring_complete(0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x3, 0x0, 0x0) 23:08:50 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 441.811886][T15907] input: syz1 as /devices/virtual/input/input803 [ 441.841573][T15912] input: syz1 as /devices/virtual/input/input804 [ 441.852661][T15913] input: syz1 as /devices/virtual/input/input805 23:08:50 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 441.894682][T15928] input: syz1 as /devices/virtual/input/input807 [ 441.912165][T15934] input: syz1 as /devices/virtual/input/input808 [ 441.912448][ T35] audit: type=1326 audit(1609974530.670:82): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15935 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 23:08:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x100}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x157) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:50 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x27) 23:08:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffd}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x7, {0xffffffff, 0x9, 0x80000001, 0x9, 0x8, 0x1}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9d09) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 442.062394][ T35] audit: type=1326 audit(1609974530.820:83): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15945 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 442.175709][T15959] input: syz1 as /devices/virtual/input/input810 [ 442.209087][T15960] input: syz1 as /devices/virtual/input/input809 [ 442.238791][T15962] input: syz1 as /devices/virtual/input/input811 23:08:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x300) [ 442.287368][T15977] input: syz1 as /devices/virtual/input/input814 [ 442.305508][T15981] input: syz1 as /devices/virtual/input/input815 23:08:51 executing program 1: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 23:08:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, 0xfffffffffffffffd) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200000, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000240)={0x32, {0x1, 0x2e0e37c0, 0x0, 0x1, 0x2}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$kcm(0x29, 0x2, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) r7 = dup3(r5, r4, 0x80000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000180)={r6}) ioctl$UI_DEV_CREATE(r0, 0x5501) fcntl$getown(0xffffffffffffffff, 0x9) 23:08:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x3e8) [ 442.557049][T16006] input: syz1 as /devices/virtual/input/input818 [ 442.567168][T16005] input: syz1 as /devices/virtual/input/input817 [ 442.611397][T16013] input: syz1 as /devices/virtual/input/input819 [ 442.652049][T16018] input: syz1 as /devices/virtual/input/input820 23:08:51 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) [ 442.711204][T16027] input: syz1 as /devices/virtual/input/input821 [ 442.759069][T16027] input: syz1 as /devices/virtual/input/input822 23:08:51 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2a0000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000140)={{r3, r4/1000+10000}, 0x1, 0x6, 0x7}, 0x18) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x9) 23:08:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x500) [ 442.940998][T16051] input: syz1 as /devices/virtual/input/input824 [ 442.964353][T16056] input: syz1 as /devices/virtual/input/input825 23:08:51 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 443.002347][ T35] audit: type=1326 audit(1609974531.760:84): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16067 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 443.026461][T16072] input: syz1 as /devices/virtual/input/input829 23:08:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) socket(0x18, 0x0, 0x54) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x80000, 0x0, 0x0, 0x3}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:51 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x600) [ 443.183430][ T35] audit: type=1326 audit(1609974531.940:85): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16085 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 443.224622][T16086] input: syz1 as /devices/virtual/input/input830 23:08:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 443.283783][T16091] input: syz1 as /devices/virtual/input/input832 [ 443.303687][T16096] ------------[ cut here ]------------ [ 443.318317][T16096] WARNING: CPU: 1 PID: 16096 at mm/page_alloc.c:4976 __alloc_pages_nodemask+0x5f8/0x730 [ 443.346392][T16101] input: syz1 as /devices/virtual/input/input834 [ 443.374399][T16096] Modules linked in: [ 443.393561][T16096] CPU: 1 PID: 16096 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 443.406630][ T35] audit: type=1326 audit(1609974532.160:86): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16111 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 443.435951][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.485840][T16096] RIP: 0010:__alloc_pages_nodemask+0x5f8/0x730 [ 443.503975][T16096] Code: 00 00 0c 00 0f 85 a7 00 00 00 8b 3c 24 4c 89 f2 44 89 e6 c6 44 24 70 00 48 89 6c 24 58 e8 d0 d7 ff ff 49 89 c5 e9 ea fc ff ff <0f> 0b e9 b5 fd ff ff 89 74 24 14 4c 89 4c 24 08 4c 89 74 24 18 e8 [ 443.570867][T16096] RSP: 0018:ffffc90008bcfbb8 EFLAGS: 00010246 [ 443.577485][T16096] RAX: 0000000000000000 RBX: 1ffff92001179f7b RCX: 0000000000000000 [ 443.586408][T16096] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000040dc0 [ 443.595102][T16096] RBP: 0000000000040dc0 R08: 0000000000000000 R09: 0000000000000000 [ 443.605824][T16096] R10: ffffffff81b1f7e1 R11: 0000000000000000 R12: 000000000000000e [ 443.614500][T16096] R13: 000000000000000e R14: 0000000000000000 R15: ffff88802aabc168 [ 443.623219][T16096] FS: 00007f1ca424e700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 443.633007][T16096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.641576][T16096] CR2: 0000000000749138 CR3: 000000002240a000 CR4: 00000000001506f0 [ 443.652348][T16096] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.663070][T16096] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 443.671862][T16096] Call Trace: [ 443.675466][T16096] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 443.698834][T16096] ? __mutex_lock+0x61b/0x1110 [ 443.711158][T16096] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 23:08:52 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x909}, 0x18}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 23:08:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0xc082, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x0, 0x1, 0x7ff}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syncfs(r0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0x0, 0x7, 0x8}, 0x10, [0x3, 0x5, 0x3ff, 0x401, 0xfffeffff, 0x81, 0x7, 0x4f63, 0x81, 0x400, 0x10001, 0x80, 0x5, 0x2, 0x1, 0x7, 0x2, 0x3, 0x3a8c, 0x8, 0x3, 0x915, 0x3, 0x7, 0x4, 0x1, 0x1, 0xfffffff8, 0x1, 0x8, 0x800, 0x3f, 0xffffff7f, 0x3ceb, 0x8c, 0xdda4, 0x6, 0x4, 0x9, 0x33, 0x1ff, 0xde, 0xffff, 0x3, 0x425a, 0x7, 0x2, 0x80, 0x9, 0x22c, 0x4, 0x7f, 0x661, 0x7, 0x9, 0x18, 0x40, 0x3, 0x3f, 0x9, 0x1, 0xbd3b, 0x7, 0x1], [0x5, 0x1000, 0x83a, 0x3, 0x0, 0x8001, 0x200, 0x1, 0xfffffffd, 0x4, 0x2, 0x9, 0x8, 0x1, 0x3, 0xff, 0x7, 0x1, 0x7fff, 0x100, 0x7, 0x800, 0x4, 0x100, 0xe2, 0x0, 0x7, 0x8ce, 0x6, 0xd4d, 0x2, 0x5e6b, 0x1, 0x5b, 0x0, 0x3, 0xff, 0x3, 0x4, 0x100, 0x8, 0x5, 0x8000, 0x8, 0x7fffffff, 0xea, 0x0, 0x5, 0x5a, 0x200, 0x81, 0xc9, 0x1000, 0x4, 0x400, 0xfffff801, 0xfffffe01, 0x1f, 0x5, 0x8, 0x8001, 0x2, 0x2, 0x7], [0x3, 0x8, 0x7, 0x6, 0x3, 0x200, 0x81, 0x40000000, 0x1, 0x1ff, 0x5b, 0x6, 0x8, 0x6, 0xffffff49, 0x3, 0x20, 0x7, 0x5, 0xffffffe0, 0x7000, 0x10, 0x1, 0x53, 0x2, 0x7, 0x3, 0x4, 0x10001, 0x6, 0xfffffff7, 0x3f, 0x8, 0x80000000, 0x3, 0x9, 0x7fff, 0x306, 0x31, 0x5, 0x8, 0x8001, 0x9, 0x8, 0x6, 0x6, 0xb1a, 0x780c, 0x1, 0xe00000, 0x401, 0x9, 0x70f882e5, 0x1, 0x6, 0x7, 0x80000000, 0x1, 0x4, 0xe65, 0x5, 0x1, 0x7f, 0x1], [0x3f, 0xdab, 0x2, 0x6, 0x5, 0x2f, 0x101, 0x1, 0x100, 0x80000000, 0x7, 0x401, 0x5, 0x9, 0x9, 0x6, 0x1, 0xdf8, 0x8, 0x8001, 0x101, 0xffffffff, 0x8, 0x7fff, 0x4, 0x3, 0x1ff, 0xae21, 0x1, 0x0, 0x5, 0x7, 0x7, 0x3, 0xeccd, 0x3ff, 0x2, 0x8, 0x1f, 0x6, 0x3, 0x8000, 0x5, 0x800, 0x5df4, 0x7f, 0x5, 0x40, 0x2fb9, 0x200, 0x4aa, 0xdc22, 0xfffffffc, 0xb5c1, 0x3ff, 0x5, 0xfffffff9, 0xfffffffb, 0x2, 0x30e5, 0x3ff, 0x7, 0x100, 0x3f]}, 0x45c) 23:08:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x200044) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) 23:08:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x700) [ 443.722258][T16096] ? tomoyo_path_number_perm+0x24e/0x590 [ 443.773981][T16096] alloc_pages_current+0x18c/0x2a0 23:08:52 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xaac4, 0xa60, 0x7, 0x1, 0xfc, 0x40, 0x7, 0x1}, &(0x7f0000000180)={0x800, 0x8, 0x1, 0x45e6, 0x8, 0xd583, 0x5, 0x40}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x100]}, 0x8}) [ 443.797201][T16096] kmalloc_order+0x2e/0xb0 [ 443.799592][T16121] input: syz1 as /devices/virtual/input/input835 [ 443.811128][ T35] audit: type=1326 audit(1609974532.570:87): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16127 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 443.813124][T16096] kmalloc_order_trace+0x14/0x120 [ 443.857699][T16125] input: syz1 as /devices/virtual/input/input836 [ 443.929571][T16138] input: syz1 as /devices/virtual/input/input838 [ 443.931442][T16096] input_mt_init_slots+0xd9/0x5f0 [ 443.946301][T16096] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 443.958073][T16096] ? uinput_write+0x1170/0x1170 [ 443.969134][T16096] ? generic_block_fiemap+0x60/0x60 [ 443.976410][T16096] ? lock_downgrade+0x6d0/0x6d0 [ 443.984300][T16096] ? _copy_to_user+0xdc/0x150 [ 444.003081][ T35] audit: type=1326 audit(1609974532.760:88): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16147 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 444.012124][T16096] ? __fget_files+0x288/0x3d0 23:08:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0xfffb, 0x78, 0x91e, 0x40}, 0x1f, [0xa3c, 0x80000000, 0x5, 0x0, 0x8000, 0x7fffffff, 0x8, 0xab8, 0x8b88, 0xfb, 0x6, 0x8, 0x0, 0x3, 0x5, 0xb0be, 0xa8ae, 0xba7, 0x97a8, 0x4ac4, 0x0, 0x100, 0x4, 0xb62, 0x8, 0xd8, 0x40, 0x5, 0xfffffff9, 0xffffffff, 0x4, 0x4, 0x0, 0x1, 0x6d2ccfcb, 0xfc, 0xc0d, 0x4, 0x82, 0x3, 0x4, 0x7, 0x9, 0x698, 0x8001, 0x99, 0x5, 0x5, 0x80000001, 0x81, 0x9, 0xd6d, 0x960d, 0xa81d, 0x7fffffff, 0x1000, 0x1000, 0x6, 0x9, 0x7, 0x5, 0x2, 0x80000000, 0x6c17], [0x2, 0x398000, 0x1, 0x5, 0x40005, 0x3, 0x8, 0x80, 0x7fff, 0x6, 0x5ace, 0x5, 0xa88, 0x4, 0x7, 0xfff, 0x31c8, 0xfff, 0x6, 0x44, 0xd435, 0x200, 0x0, 0x6, 0xfffffc01, 0x3, 0x0, 0x6, 0x5, 0x101, 0x4, 0xfffffffc, 0xffffffff, 0x9, 0x2, 0x52c, 0x40, 0x3, 0x0, 0x3f, 0x2, 0x9, 0x800, 0x400, 0x5, 0x8, 0x1, 0x3f, 0x101, 0x4, 0x1, 0x3, 0x1f, 0x9, 0x6, 0x3ff, 0x3, 0xf, 0x6, 0xe28, 0x0, 0x80, 0x6, 0x3], [0x1, 0x2, 0xc, 0x3, 0x2, 0x8, 0x52, 0x4e3, 0x7fffffff, 0xa4, 0x3b77, 0x3, 0x5, 0x0, 0xfff, 0x598e, 0x1, 0xfffffffc, 0x7, 0xffffffff, 0x5, 0x81, 0x5, 0x0, 0x7, 0x7, 0x1, 0x2, 0x2, 0xfffffffc, 0x8, 0x5, 0x1, 0x9, 0xffffffff, 0x1, 0x3ff, 0x3, 0x0, 0x3fd, 0x2a5a, 0x0, 0xfffffff7, 0x9, 0x6, 0xfffffffa, 0x4, 0x10000, 0xd5, 0x3, 0xfffffff8, 0x1, 0x5, 0x6, 0x5, 0x401, 0x76, 0x5, 0x715, 0x8, 0x0, 0x2, 0x7f00000, 0x10000], [0x2, 0xffffffc1, 0x376, 0x1, 0x7, 0x0, 0x9000000, 0xfffffff9, 0x8, 0x200, 0x7fff, 0x2, 0x400, 0x5, 0x3ff, 0x9, 0x80000000, 0x0, 0x31b99c8b, 0x80000001, 0x8, 0x8, 0x6, 0x8, 0x9, 0xfffeffff, 0x100, 0x5, 0x3, 0xc015, 0xffff, 0x1, 0x400004, 0x4, 0x40, 0x7, 0x6, 0x3ff, 0x10001, 0x5, 0x56149bbb, 0x6, 0x3ff, 0xfffffff8, 0x7fff, 0xfffffffd, 0x2, 0x2, 0x10000, 0x40, 0xfffffff7, 0x101, 0x0, 0x2, 0x3f, 0x4, 0x4, 0x3, 0x1, 0xffffff7f, 0x2, 0x8, 0x0, 0x81]}, 0x45c) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r5, 0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x0, 0x23, 0x200}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:08:52 executing program 1: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x7, 0x6}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0xfff, {0x5, 0x0, 0x0, 0x0, 0x0, 0x400004}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) write$input_event(r0, &(0x7f0000000080)={{0x0, 0xea60}, 0x5, 0x8, 0xe627}, 0x18) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r2, 0x0, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xd) write(r1, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x7, 0x7ff, 0x1, 0x3}, 0x11, [0x185, 0x7a, 0x4, 0xfff, 0xfff, 0x6, 0x1, 0x101, 0x7, 0xffffffff, 0xffffffff, 0x0, 0xf8, 0x4, 0x9, 0xa198, 0x5, 0x3, 0x8, 0x9, 0xd7, 0x81, 0x4, 0xffff, 0x1ff, 0x1ff, 0x81, 0x2, 0x7, 0x11b8, 0x400, 0x0, 0x9, 0x52e, 0x800, 0x6, 0xe12d, 0x9, 0xdfa2e911, 0x7f, 0x3, 0x7, 0x64, 0xe9aa, 0x10000, 0x2, 0x3, 0x6c0, 0x7, 0xfffffffb, 0x3, 0x6000000, 0x1, 0x8000, 0x2, 0x0, 0xe0e, 0x6, 0xfd3, 0x4, 0x6, 0x1, 0x0, 0x2], [0x5, 0x3, 0x87, 0x20, 0x7, 0x1ff, 0x2, 0x4, 0x3, 0x4, 0x1000, 0x6, 0x3, 0x1, 0x40, 0x8, 0x100, 0x0, 0x2, 0x7fff, 0x2, 0x9, 0x0, 0x9, 0x80, 0xc2, 0xff, 0x4, 0x7, 0x7, 0x2, 0x9, 0x25, 0x1, 0x10001, 0x4f1, 0x6, 0x8000, 0x4, 0x1b, 0x6, 0xfffff800, 0x9, 0x4b, 0x10e, 0x2, 0x0, 0x7, 0x4, 0xf4a, 0x5661, 0x6, 0x7, 0x7fffffff, 0x1, 0x29e, 0x800, 0xff, 0x10001, 0x3800000, 0x7, 0x0, 0x8, 0x32e], [0x6, 0x200, 0x6, 0x7, 0x4a, 0x6, 0x100, 0x2, 0x0, 0x7fffffff, 0xa527f03, 0x20, 0xfff, 0x2, 0xb3, 0x7984, 0x3, 0x9, 0x7, 0x40f, 0x7, 0x8fd7, 0x6a4, 0x3, 0x1000, 0x2, 0x7fff, 0x9, 0x7, 0x1000, 0x7, 0x4, 0x3, 0x2, 0x1, 0x1, 0x3, 0x1ff, 0x8, 0x9, 0x800, 0x1, 0x2, 0x80000001, 0x3, 0x5, 0x69, 0x9, 0x6, 0x2, 0x3, 0x8, 0x800, 0x3, 0x1ff, 0x1ff, 0x80000000, 0x5, 0x1, 0xfff, 0x2, 0x81a, 0xfff, 0x3], [0x9, 0x100, 0xfff, 0x4, 0x0, 0x7fffffff, 0x7, 0x6, 0x200, 0x20, 0x8, 0x8000, 0x1, 0x9, 0x7, 0x3, 0x5, 0x80, 0xfffffff9, 0xb39, 0x5, 0x3, 0x8, 0xf0a4, 0x4c674f59, 0x7, 0x10000, 0x6, 0x8001, 0x9, 0x84, 0x2, 0x9, 0xef4, 0xfffffe00, 0x5, 0x6, 0xac9d, 0x7, 0x101, 0xc00000, 0x7, 0x1, 0x8, 0x40, 0x200020, 0x0, 0x2, 0x5, 0x9, 0x2, 0x9, 0x8, 0x42f3, 0x9, 0x80, 0x9, 0x101, 0x5, 0xfffffffb, 0x7, 0x8, 0x7ff, 0x8]}, 0x45c) [ 444.075823][T16096] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:08:52 executing program 4: openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f1f0064650f38f1bd0040670f01c2f08289461603f2afb800008ed866b9820a00000f32ba610066ed0f08", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x80000000007, 0x0, 0x0, 0x0, 0x20000004ce], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x900) [ 444.117514][T16096] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 444.154355][T16096] __x64_sys_ioctl+0x193/0x200 [ 444.174799][T16096] do_syscall_64+0x2d/0x70 [ 444.187559][T16096] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.204093][T16096] RIP: 0033:0x45e219 [ 444.208573][T16166] input: syz1 as /devices/virtual/input/input843 [ 444.221218][T16096] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.243427][T16096] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.267524][T16172] input: syz1 as /devices/virtual/input/input844 [ 444.274618][T16096] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045e219 [ 444.286713][T16096] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 444.338918][T16096] RBP: 000000000119bfb8 R08: 0000000000000000 R09: 0000000000000000 [ 444.364661][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 444.390773][T16096] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c [ 444.405023][T16096] Kernel panic - not syncing: panic_on_warn set ... [ 444.411649][T16096] CPU: 0 PID: 16096 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 444.420427][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.430535][T16096] Call Trace: [ 444.433825][T16096] dump_stack+0x107/0x163 [ 444.438181][T16096] panic+0x306/0x73d [ 444.442148][T16096] ? __warn_printk+0xf3/0xf3 [ 444.446775][T16096] ? __warn.cold+0x1a/0x44 [ 444.451213][T16096] ? __alloc_pages_nodemask+0x5f8/0x730 [ 444.456782][T16096] __warn.cold+0x35/0x44 [ 444.461050][T16096] ? __alloc_pages_nodemask+0x5f8/0x730 [ 444.466629][T16096] report_bug+0x1bd/0x210 [ 444.471051][T16096] handle_bug+0x3c/0x60 [ 444.475229][T16096] exc_invalid_op+0x14/0x40 [ 444.479748][T16096] asm_exc_invalid_op+0x12/0x20 [ 444.484622][T16096] RIP: 0010:__alloc_pages_nodemask+0x5f8/0x730 [ 444.490826][T16096] Code: 00 00 0c 00 0f 85 a7 00 00 00 8b 3c 24 4c 89 f2 44 89 e6 c6 44 24 70 00 48 89 6c 24 58 e8 d0 d7 ff ff 49 89 c5 e9 ea fc ff ff <0f> 0b e9 b5 fd ff ff 89 74 24 14 4c 89 4c 24 08 4c 89 74 24 18 e8 [ 444.510456][T16096] RSP: 0018:ffffc90008bcfbb8 EFLAGS: 00010246 [ 444.516539][T16096] RAX: 0000000000000000 RBX: 1ffff92001179f7b RCX: 0000000000000000 [ 444.524522][T16096] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000040dc0 [ 444.532509][T16096] RBP: 0000000000040dc0 R08: 0000000000000000 R09: 0000000000000000 [ 444.540492][T16096] R10: ffffffff81b1f7e1 R11: 0000000000000000 R12: 000000000000000e [ 444.548479][T16096] R13: 000000000000000e R14: 0000000000000000 R15: ffff88802aabc168 [ 444.556471][T16096] ? policy_node+0xe1/0x140 [ 444.561012][T16096] ? __alloc_pages_slowpath.constprop.0+0x2240/0x2240 [ 444.567802][T16096] ? __mutex_lock+0x61b/0x1110 [ 444.572596][T16096] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 444.578864][T16096] ? tomoyo_path_number_perm+0x24e/0x590 [ 444.584525][T16096] alloc_pages_current+0x18c/0x2a0 [ 444.589663][T16096] kmalloc_order+0x2e/0xb0 [ 444.594118][T16096] kmalloc_order_trace+0x14/0x120 [ 444.599183][T16096] input_mt_init_slots+0xd9/0x5f0 [ 444.604230][T16096] uinput_ioctl_handler.isra.0+0x81d/0x1dc0 [ 444.610156][T16096] ? uinput_write+0x1170/0x1170 [ 444.615030][T16096] ? generic_block_fiemap+0x60/0x60 [ 444.620253][T16096] ? lock_downgrade+0x6d0/0x6d0 [ 444.625129][T16096] ? _copy_to_user+0xdc/0x150 [ 444.629841][T16096] ? __fget_files+0x288/0x3d0 [ 444.634541][T16096] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 444.640822][T16096] ? uinput_ioctl_handler.isra.0+0x1dc0/0x1dc0 [ 444.647027][T16096] __x64_sys_ioctl+0x193/0x200 [ 444.651817][T16096] do_syscall_64+0x2d/0x70 [ 444.656253][T16096] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 444.662169][T16096] RIP: 0033:0x45e219 [ 444.666081][T16096] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.685737][T16096] RSP: 002b:00007f1ca424dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.694170][T16096] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045e219 [ 444.702164][T16096] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 444.710144][T16096] RBP: 000000000119bfb8 R08: 0000000000000000 R09: 0000000000000000 [ 444.718131][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 444.726121][T16096] R13: 00000000016afb5f R14: 00007f1ca424e9c0 R15: 000000000119bf8c [ 444.734817][T16096] Kernel Offset: disabled [ 444.739308][T16096] Rebooting in 86400 seconds..